Class: StixWindowsRegistryValue
A value found under a Windows registry key.
URI: attack:StixWindowsRegistryValue
classDiagram
class StixWindowsRegistryValue
click StixWindowsRegistryValue href "../StixWindowsRegistryValue/"
StixWindowsRegistryValue : data
StixWindowsRegistryValue : data_type
StixWindowsRegistryValue --> "0..1" StixWindowsRegistryDatatype : data_type
click StixWindowsRegistryDatatype href "../StixWindowsRegistryDatatype/"
StixWindowsRegistryValue : name
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| name | 0..1 String |
A name that identifies the object | direct |
| data | 0..1 String |
Specifies the data contained in the registry value | direct |
| data_type | 0..1 StixWindowsRegistryDatatype |
Specifies the registry (REG_*) data type used in the registry value | direct |
Expressions & Logic
Any Of
Section titled “Any Of”The class must satisfy at least one of:
- AnonymousClassExpression({‘slot_conditions’: {‘name’: SlotDefinition({‘name’: ‘name’, ‘required’: True})}})
- AnonymousClassExpression({‘slot_conditions’: {‘data’: SlotDefinition({‘name’: ‘data’, ‘required’: True})}})
- AnonymousClassExpression({ ‘slot_conditions’: {‘data_type’: SlotDefinition({‘name’: ‘data_type’, ‘required’: True})} })
Usages
Section titled “Usages”| used by | used in | type | used |
|---|---|---|---|
| StixWindowsRegistryKey | values | range | StixWindowsRegistryValue |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:StixWindowsRegistryValue |
| native | attack:StixWindowsRegistryValue |
| close | uco-observable:WindowsRegistryValue |
LinkML Source
Section titled “LinkML Source”Direct
Section titled “Direct”name: StixWindowsRegistryValuedescription: A value found under a Windows registry key.from_schema: https://w3id.org/lmodel/attackclose_mappings:- uco-observable:WindowsRegistryValueslots:- name- data- data_typeany_of:- slot_conditions: name: name: name required: true- slot_conditions: data: name: data required: true- slot_conditions: data_type: name: data_type required: trueInduced
Section titled “Induced”name: StixWindowsRegistryValuedescription: A value found under a Windows registry key.from_schema: https://w3id.org/lmodel/attackclose_mappings:- uco-observable:WindowsRegistryValueattributes: name: name: name description: A name that identifies the object. from_schema: https://w3id.org/lmodel/attack close_mappings: - uco-core:name rank: 1000 slot_uri: stix:name owner: StixWindowsRegistryValue domain_of: - AttackTactic - AttackMatrix - AttackCollection - AttackAsset - AttackDataSource - AttackDataComponent - AttackDetectionStrategy - AttackAnalytic - AttackRelatedAsset - AttackLogSource - AttackLogSourceReference - StixIdentity - StixMarkingDefinition - StixExtensionDefinition - StixAutonomousSystem - StixFile - StixMutex - StixSoftware - StixAlternateDataStream - StixWindowsPeSection - StixWindowsRegistryValue - StixAttackPattern - StixCampaign - StixCourseOfAction - StixGrouping - StixIncident - StixIndicator - StixInfrastructure - StixIntrusionSet - StixLocation - StixMalware - StixReport - StixThreatActor - StixTool - StixVulnerability range: string data: name: data description: Specifies the data contained in the registry value. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:data owner: StixWindowsRegistryValue domain_of: - StixWindowsRegistryValue range: string data_type: name: data_type description: Specifies the registry (REG_*) data type used in the registry value. from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:data_type owner: StixWindowsRegistryValue domain_of: - StixWindowsRegistryValue range: StixWindowsRegistryDatatypeany_of:- slot_conditions: name: name: name required: true- slot_conditions: data: name: data required: true- slot_conditions: data_type: name: data_type required: true