attack
A LinkML model of MITRE ATT&CK as MITRE publishes it in STIX 2.1: the tactics, techniques, groups, campaigns, software, mitigations, assets, data sources, data components, detection strategies and analytics of the Enterprise, Mobile and ICS domains, and the matrices, collections, relationships, identity and marking that hold them together. Each class extends the lmodel/stix class it builds on, and ATT&CK’s own properties keep the keys MITRE’s data writes, so MITRE’s bundles validate unchanged.