Slot: alternate_data_streams
Specifies a list of NTFS alternate data streams that exist for the file.
URI: stix:alternate_data_streams
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| StixNtfsExtension | The NTFS file extension specifies a default extension for capturing propertie… | no |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | StixAlternateDataStream |
| Domain Of | StixNtfsExtension |
| Slot URI | stix:alternate_data_streams |
Cardinality and Requirements
Section titled “Cardinality and Requirements”| Property | Value |
|---|---|
| Multivalued | Yes |
| Minimum Cardinality | 1 |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | stix:alternate_data_streams |
| native | attack:alternate_data_streams |
LinkML Source
Section titled “LinkML Source”name: alternate_data_streamsdescription: Specifies a list of NTFS alternate data streams that exist for the file.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: stix:alternate_data_streamsdomain_of:- StixNtfsExtensionrange: StixAlternateDataStreammultivalued: trueinlined: trueinlined_as_list: trueminimum_cardinality: 1