Skip to content

Class: StixWindowsRegistryValue

A value found under a Windows registry key.

URI: attack:StixWindowsRegistryValue

 classDiagram
    class StixWindowsRegistryValue
    click StixWindowsRegistryValue href "../StixWindowsRegistryValue/"
      StixWindowsRegistryValue : data
        
      StixWindowsRegistryValue : data_type
        
          
    
        
        
        StixWindowsRegistryValue --> "0..1" StixWindowsRegistryDatatype : data_type
        click StixWindowsRegistryDatatype href "../StixWindowsRegistryDatatype/"
    

        
      StixWindowsRegistryValue : name
        
      
Name Cardinality and Range Description Inheritance
name 0..1
String
A name that identifies the object direct
data 0..1
String
Specifies the data contained in the registry value direct
data_type 0..1
StixWindowsRegistryDatatype
Specifies the registry (REG_*) data type used in the registry value direct
Expressions & Logic

The class must satisfy at least one of:

  • AnonymousClassExpression({‘slot_conditions’: {‘name’: SlotDefinition({‘name’: ‘name’, ‘required’: True})}})
  • AnonymousClassExpression({‘slot_conditions’: {‘data’: SlotDefinition({‘name’: ‘data’, ‘required’: True})}})
  • AnonymousClassExpression({ ‘slot_conditions’: {‘data_type’: SlotDefinition({‘name’: ‘data_type’, ‘required’: True})} })
used by used in type used
StixWindowsRegistryKey values range StixWindowsRegistryValue
Mapping Type Mapped Value
self attack:StixWindowsRegistryValue
native attack:StixWindowsRegistryValue
close uco-observable:WindowsRegistryValue
name: StixWindowsRegistryValue
description: A value found under a Windows registry key.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:WindowsRegistryValue
slots:
- name
- data
- data_type
any_of:
- slot_conditions:
name:
name: name
required: true
- slot_conditions:
data:
name: data
required: true
- slot_conditions:
data_type:
name: data_type
required: true
name: StixWindowsRegistryValue
description: A value found under a Windows registry key.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-observable:WindowsRegistryValue
attributes:
name:
name: name
description: A name that identifies the object.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-core:name
rank: 1000
slot_uri: stix:name
owner: StixWindowsRegistryValue
domain_of:
- AttackTactic
- AttackMatrix
- AttackCollection
- AttackAsset
- AttackDataSource
- AttackDataComponent
- AttackDetectionStrategy
- AttackAnalytic
- AttackRelatedAsset
- AttackLogSource
- AttackLogSourceReference
- StixIdentity
- StixMarkingDefinition
- StixExtensionDefinition
- StixAutonomousSystem
- StixFile
- StixMutex
- StixSoftware
- StixAlternateDataStream
- StixWindowsPeSection
- StixWindowsRegistryValue
- StixAttackPattern
- StixCampaign
- StixCourseOfAction
- StixGrouping
- StixIncident
- StixIndicator
- StixInfrastructure
- StixIntrusionSet
- StixLocation
- StixMalware
- StixReport
- StixThreatActor
- StixTool
- StixVulnerability
range: string
data:
name: data
description: Specifies the data contained in the registry value.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:data
owner: StixWindowsRegistryValue
domain_of:
- StixWindowsRegistryValue
range: string
data_type:
name: data_type
description: Specifies the registry (REG_*) data type used in the registry value.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:data_type
owner: StixWindowsRegistryValue
domain_of:
- StixWindowsRegistryValue
range: StixWindowsRegistryDatatype
any_of:
- slot_conditions:
name:
name: name
required: true
- slot_conditions:
data:
name: data
required: true
- slot_conditions:
data_type:
name: data_type
required: true