Class: StixPdfExtension

The PDF file extension specifies a default extension for capturing properties specific to PDF files.

URI: attack:StixPdfExtension

 classDiagram
    class StixPdfExtension
    click StixPdfExtension href "../StixPdfExtension/"
      StixPdfExtension : document_info_dict
        
          
    
        
        
        StixPdfExtension --> "0..1" StixPdfDocumentInfo : document_info_dict
        click StixPdfDocumentInfo href "../StixPdfDocumentInfo/"
    

        
      StixPdfExtension : is_optimized
        
      StixPdfExtension : pdfid0
        
      StixPdfExtension : pdfid1
        
      StixPdfExtension : version
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
version	0..1 String	A version, as a string; each class says of what	direct
is_optimized	0..1 Boolean	Specifies whether the PDF file has been optimized	direct
document_info_dict	0..1 StixPdfDocumentInfo	Specifies details of the PDF document information dictionary (DID), which inc…	direct
pdfid0	0..1 String	Specifies the first file identifier found for the PDF file	direct
pdfid1	0..1 String	Specifies the second file identifier found for the PDF file	direct

Expressions & Logic

Any Of

The class must satisfy at least one of:

• AnonymousClassExpression({ ‘slot_conditions’: {‘version’: SlotDefinition({‘name’: ‘version’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘is_optimized’: SlotDefinition({‘name’: ‘is_optimized’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘document_info_dict’: SlotDefinition({‘name’: ‘document_info_dict’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘pdfid0’: SlotDefinition({‘name’: ‘pdfid0’, ‘required’: True})} })
• AnonymousClassExpression({ ‘slot_conditions’: {‘pdfid1’: SlotDefinition({‘name’: ‘pdfid1’, ‘required’: True})} })

Identifier and Mapping Information

Annotations

property	value
stix_extension_name	pdf-ext

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:StixPdfExtension
native	attack:StixPdfExtension
close	uco-observable:PDFFileFacet

LinkML Source

Direct

name: StixPdfExtension
annotations:
  stix_extension_name:
    tag: stix_extension_name
    value: pdf-ext
description: The PDF file extension specifies a default extension for capturing properties
  specific to PDF files.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:PDFFileFacet
slots:
- version
- is_optimized
- document_info_dict
- pdfid0
- pdfid1
any_of:
- slot_conditions:
    version:
      name: version
      required: true
- slot_conditions:
    is_optimized:
      name: is_optimized
      required: true
- slot_conditions:
    document_info_dict:
      name: document_info_dict
      required: true
- slot_conditions:
    pdfid0:
      name: pdfid0
      required: true
- slot_conditions:
    pdfid1:
      name: pdfid1
      required: true

Induced

name: StixPdfExtension
annotations:
  stix_extension_name:
    tag: stix_extension_name
    value: pdf-ext
description: The PDF file extension specifies a default extension for capturing properties
  specific to PDF files.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:PDFFileFacet
attributes:
  version:
    name: version
    description: A version, as a string; each class says of what.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:version
    owner: StixPdfExtension
    domain_of:
    - StixExtensionDefinition
    - StixSoftware
    - StixX509Certificate
    - StixPdfExtension
    - StixMalwareAnalysis
    range: string
  is_optimized:
    name: is_optimized
    description: Specifies whether the PDF file has been optimized.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:is_optimized
    owner: StixPdfExtension
    domain_of:
    - StixPdfExtension
    range: boolean
  document_info_dict:
    name: document_info_dict
    description: Specifies details of the PDF document information dictionary (DID),
      which includes properties like the document creation data and producer, as a
      dictionary.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:document_info_dict
    owner: StixPdfExtension
    domain_of:
    - StixPdfExtension
    range: StixPdfDocumentInfo
    inlined: true
  pdfid0:
    name: pdfid0
    description: Specifies the first file identifier found for the PDF file.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:pdfid0
    owner: StixPdfExtension
    domain_of:
    - StixPdfExtension
    range: string
  pdfid1:
    name: pdfid1
    description: Specifies the second file identifier found for the PDF file.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:pdfid1
    owner: StixPdfExtension
    domain_of:
    - StixPdfExtension
    range: string
any_of:
- slot_conditions:
    version:
      name: version
      required: true
- slot_conditions:
    is_optimized:
      name: is_optimized
      required: true
- slot_conditions:
    document_info_dict:
      name: document_info_dict
      required: true
- slot_conditions:
    pdfid0:
      name: pdfid0
      required: true
- slot_conditions:
    pdfid1:
      name: pdfid1
      required: true