Class: StixMacAddress

The MAC Address Object represents a single Media Access Control (MAC) address.

URI: attack:StixMacAddress

 classDiagram
    class StixMacAddress
    click StixMacAddress href "../StixMacAddress/"
      StixCyberObservableObject <|-- StixMacAddress
        click StixCyberObservableObject href "../StixCyberObservableObject/"
      
      StixMacAddress : defanged
        
      StixMacAddress : extensions
        
          
    
        
        
        StixMacAddress --> "0..1" StixExtensions : extensions
        click StixExtensions href "../StixExtensions/"
    

        
      StixMacAddress : granular_markings
        
          
    
        
        
        StixMacAddress --> "1..*" StixGranularMarking : granular_markings
        click StixGranularMarking href "../StixGranularMarking/"
    

        
      StixMacAddress : id
        
      StixMacAddress : object_marking_refs
        
          
    
        
        
        StixMacAddress --> "1..*" StixMarkingDefinition : object_marking_refs
        click StixMarkingDefinition href "../StixMarkingDefinition/"
    

        
      StixMacAddress : spec_version
        
          
    
        
        
        StixMacAddress --> "0..1" StixSpecVersion : spec_version
        click StixSpecVersion href "../StixSpecVersion/"
    

        
      StixMacAddress : type
        
      StixMacAddress : value
        
      

Inheritance

• StixObject
  • StixCyberObservableObject
    • StixMacAddress

Slots

Name	Cardinality and Range	Description	Inheritance
value	1 String	The value of the observable, in the form each class states	direct
defanged	0..1 Boolean	Defines whether or not the data contained within the object has been defanged	StixCyberObservableObject
id	1 StixIdentifier	The identifier of the object: its STIX type, two hyphens and a UUID	StixObject
type	1 String	The STIX type name of the object, such as attack-pattern	StixObject
spec_version	0..1 StixSpecVersion	The version of the STIX specification used to represent the object	StixObject
object_marking_refs	1..* StixMarkingDefinition	References to the marking definitions that apply to the object	StixObject
granular_markings	1..* StixGranularMarking	The granular markings that apply to parts of the object	StixObject
extensions	0..1 StixExtensions	The object’s extensions, as a dictionary keyed by extension name	StixObject

Usages

used by	used in	type	used
StixIpv4Address	resolves_to_refs	range	StixMacAddress
StixIpv6Address	resolves_to_refs	range	StixMacAddress
StixNetworkTraffic	src_ref	any_of[range]	StixMacAddress
StixNetworkTraffic	dst_ref	any_of[range]	StixMacAddress

Identifier and Mapping Information

Annotations

property	value
stix_type	mac-addr

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:StixMacAddress
native	attack:StixMacAddress
close	uco-observable:MACAddress

LinkML Source

Direct

name: StixMacAddress
annotations:
  stix_type:
    tag: stix_type
    value: mac-addr
description: The MAC Address Object represents a single Media Access Control (MAC)
  address.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:MACAddress
is_a: StixCyberObservableObject
slots:
- value
slot_usage:
  id:
    name: id
    pattern: ^mac-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: mac-addr
  value:
    name: value
    required: true
    pattern: ^([0-9a-f]{2}[:]){5}([0-9a-f]{2})$

Induced

name: StixMacAddress
annotations:
  stix_type:
    tag: stix_type
    value: mac-addr
description: The MAC Address Object represents a single Media Access Control (MAC)
  address.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:MACAddress
is_a: StixCyberObservableObject
slot_usage:
  id:
    name: id
    pattern: ^mac-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    equals_string: mac-addr
  value:
    name: value
    required: true
    pattern: ^([0-9a-f]{2}[:]){5}([0-9a-f]{2})$
attributes:
  value:
    name: value
    description: The value of the observable, in the form each class states.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:value
    owner: StixMacAddress
    domain_of:
    - StixDomainName
    - StixEmailAddress
    - StixIpv4Address
    - StixIpv6Address
    - StixMacAddress
    - StixUrl
    range: string
    required: true
    pattern: ^([0-9a-f]{2}[:]){5}([0-9a-f]{2})$
  defanged:
    name: defanged
    description: Defines whether or not the data contained within the object has been
      defanged.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:defanged
    owner: StixMacAddress
    domain_of:
    - StixCyberObservableObject
    range: boolean
  id:
    name: id
    description: 'The identifier of the object: its STIX type, two hyphens and a UUID.
      Each class narrows the type.'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:id
    identifier: true
    owner: StixMacAddress
    domain_of:
    - StixObject
    - StixBundle
    range: stix_identifier
    required: true
    pattern: ^mac-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
  type:
    name: type
    description: The STIX type name of the object, such as attack-pattern. Each class
      pins its own.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:type
    owner: StixMacAddress
    domain_of:
    - StixObject
    - StixBundle
    range: string
    required: true
    pattern: ^([a-z][a-z0-9]*)+(-[a-z0-9]+)*\-?$
    equals_string: mac-addr
  spec_version:
    name: spec_version
    description: The version of the STIX specification used to represent the object.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:spec_version
    owner: StixMacAddress
    domain_of:
    - StixObject
    range: StixSpecVersion
  object_marking_refs:
    name: object_marking_refs
    description: References to the marking definitions that apply to the object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:objectMarking
    rank: 1000
    slot_uri: stix:object_marking_refs
    owner: StixMacAddress
    domain_of:
    - StixObject
    range: StixMarkingDefinition
    multivalued: true
    pattern: ^marking-definition--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
    minimum_cardinality: 1
  granular_markings:
    name: granular_markings
    description: The granular markings that apply to parts of the object.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:granular_markings
    owner: StixMacAddress
    domain_of:
    - StixObject
    range: StixGranularMarking
    multivalued: true
    inlined: true
    inlined_as_list: true
    minimum_cardinality: 1
  extensions:
    name: extensions
    description: The object's extensions, as a dictionary keyed by extension name.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:extensions
    owner: StixMacAddress
    domain_of:
    - StixObject
    range: StixExtensions
    inlined: true