Class: StixWindowsPeSection

A section of a Windows PE binary.

URI: attack:StixWindowsPeSection

 classDiagram
    class StixWindowsPeSection
    click StixWindowsPeSection href "../StixWindowsPeSection/"
      StixWindowsPeSection : entropy
        
      StixWindowsPeSection : hashes
        
          
    
        
        
        StixWindowsPeSection --> "0..1" StixHashes : hashes
        click StixHashes href "../StixHashes/"
    

        
      StixWindowsPeSection : name
        
      StixWindowsPeSection : size
        
      

Slots

Name	Cardinality and Range	Description	Inheritance
name	1 String	A name that identifies the object	direct
size	0..1 Integer	A size in bytes, as a non-negative integer	direct
entropy	0..1 Float	Specifies the calculated entropy for the section, as calculated using the Sha…	direct
hashes	0..1 StixHashes	A dictionary of hashes of the content, keyed by hash algorithm	direct

Usages

used by	used in	type	used
StixWindowsPeBinaryExtension	sections	range	StixWindowsPeSection

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:StixWindowsPeSection
native	attack:StixWindowsPeSection
close	uco-observable:WindowsPESection

LinkML Source

Direct

name: StixWindowsPeSection
description: A section of a Windows PE binary.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:WindowsPESection
slots:
- name
- size
- entropy
- hashes
slot_usage:
  name:
    name: name
    required: true

Induced

name: StixWindowsPeSection
description: A section of a Windows PE binary.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:WindowsPESection
slot_usage:
  name:
    name: name
    required: true
attributes:
  name:
    name: name
    description: A name that identifies the object.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - uco-core:name
    rank: 1000
    slot_uri: stix:name
    owner: StixWindowsPeSection
    domain_of:
    - AttackTactic
    - AttackMatrix
    - AttackCollection
    - AttackAsset
    - AttackDataSource
    - AttackDataComponent
    - AttackDetectionStrategy
    - AttackAnalytic
    - AttackRelatedAsset
    - AttackLogSource
    - AttackLogSourceReference
    - StixIdentity
    - StixMarkingDefinition
    - StixExtensionDefinition
    - StixAutonomousSystem
    - StixFile
    - StixMutex
    - StixSoftware
    - StixAlternateDataStream
    - StixWindowsPeSection
    - StixWindowsRegistryValue
    - StixAttackPattern
    - StixCampaign
    - StixCourseOfAction
    - StixGrouping
    - StixIncident
    - StixIndicator
    - StixInfrastructure
    - StixIntrusionSet
    - StixLocation
    - StixMalware
    - StixReport
    - StixThreatActor
    - StixTool
    - StixVulnerability
    range: string
    required: true
  size:
    name: size
    description: A size in bytes, as a non-negative integer.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:size
    owner: StixWindowsPeSection
    domain_of:
    - StixFile
    - StixAlternateDataStream
    - StixWindowsPeSection
    range: integer
    minimum_value: 0
  entropy:
    name: entropy
    description: Specifies the calculated entropy for the section, as calculated using
      the Shannon algorithm.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:entropy
    owner: StixWindowsPeSection
    domain_of:
    - StixWindowsPeSection
    range: float
  hashes:
    name: hashes
    description: A dictionary of hashes of the content, keyed by hash algorithm.
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    slot_uri: stix:hashes
    owner: StixWindowsPeSection
    domain_of:
    - StixExternalReference
    - StixArtifact
    - StixFile
    - StixX509Certificate
    - StixAlternateDataStream
    - StixWindowsPeSection
    - StixWindowsPeOptionalHeader
    range: StixHashes
    inlined: true