Skip to content

Class: StixTcpExtension

The TCP extension specifies a default extension for capturing network traffic properties specific to TCP.

URI: attack:StixTcpExtension

 classDiagram
    class StixTcpExtension
    click StixTcpExtension href "../StixTcpExtension/"
      StixTcpExtension : dst_flags_hex
        
      StixTcpExtension : src_flags_hex
        
      
Name Cardinality and Range Description Inheritance
src_flags_hex 0..1
StixHex
Specifies the source TCP flags, as the union of all TCP flags observed betwee… direct
dst_flags_hex 0..1
StixHex
Specifies the destination TCP flags, as the union of all TCP flags observed b… direct
Expressions & Logic

The class must satisfy at least one of:

  • AnonymousClassExpression({ ‘slot_conditions’: {‘src_flags_hex’: SlotDefinition({‘name’: ‘src_flags_hex’, ‘required’: True})} })
  • AnonymousClassExpression({ ‘slot_conditions’: {‘dst_flags_hex’: SlotDefinition({‘name’: ‘dst_flags_hex’, ‘required’: True})} })
property value
stix_extension_name tcp-ext
Mapping Type Mapped Value
self attack:StixTcpExtension
native attack:StixTcpExtension
close uco-observable:TCPConnectionFacet
name: StixTcpExtension
annotations:
stix_extension_name:
tag: stix_extension_name
value: tcp-ext
description: The TCP extension specifies a default extension for capturing network
traffic properties specific to TCP.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:TCPConnectionFacet
slots:
- src_flags_hex
- dst_flags_hex
any_of:
- slot_conditions:
src_flags_hex:
name: src_flags_hex
required: true
- slot_conditions:
dst_flags_hex:
name: dst_flags_hex
required: true
name: StixTcpExtension
annotations:
stix_extension_name:
tag: stix_extension_name
value: tcp-ext
description: The TCP extension specifies a default extension for capturing network
traffic properties specific to TCP.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:TCPConnectionFacet
attributes:
src_flags_hex:
name: src_flags_hex
description: Specifies the source TCP flags, as the union of all TCP flags observed
between the start of the traffic (as defined by the start property) and the
end of the traffic (as defined by the end property).
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:src_flags_hex
owner: StixTcpExtension
domain_of:
- StixTcpExtension
range: stix_hex
dst_flags_hex:
name: dst_flags_hex
description: Specifies the destination TCP flags, as the union of all TCP flags
observed between the start of the traffic (as defined by the start property)
and the end of the traffic (as defined by the end property).
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:dst_flags_hex
owner: StixTcpExtension
domain_of:
- StixTcpExtension
range: stix_hex
any_of:
- slot_conditions:
src_flags_hex:
name: src_flags_hex
required: true
- slot_conditions:
dst_flags_hex:
name: dst_flags_hex
required: true