Slot: architecture_execution_envs
The processor architectures, such as x86 or ARM, that the malware runs on.
URI: stix:architecture_execution_envs
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| StixMalware | Malicious code: a program inserted into a system, usually covertly, to compro… | no |
| AttackMalware | Malware: commercial, custom or open-source software an adversary uses for mal… | no |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | String or StixProcessorArchitecture |
| Domain Of | StixMalware |
| Slot URI | stix:architecture_execution_envs |
Cardinality and Requirements
Section titled “Cardinality and Requirements”| Property | Value |
|---|---|
| Multivalued | Yes |
| Minimum Cardinality | 1 |
Expressions & Logic
Any Of
Section titled “Any Of”Value must satisfy at least one of:
- AnonymousSlotExpression({‘range’: ‘StixProcessorArchitecture’})
- AnonymousSlotExpression({‘range’: ‘string’})
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | stix:architecture_execution_envs |
| native | attack:architecture_execution_envs |
LinkML Source
Section titled “LinkML Source”name: architecture_execution_envsdescription: The processor architectures, such as x86 or ARM, that the malware runs on.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: stix:architecture_execution_envsdomain_of:- StixMalwarerange: stringmultivalued: trueminimum_cardinality: 1any_of:- range: StixProcessorArchitecture- range: string