Slot: body_raw_ref

Specifies the contents of non-textual MIME parts, that is those whose content_type does not start with text/, as a reference to an Artifact Object or File Object.

URI: stix:body_raw_ref

Applicable Classes

Name	Description	Modifies Slot
StixMimePart	One MIME part of a multipart email body	no

Properties

Type and Range

Property	Value
Range	StixCyberObservableObject or  StixArtifact or  StixFile
Domain Of	StixMimePart
Slot URI	stix:body_raw_ref

Value Constraints

Property	Value
Regex Pattern	`^(artifact

Expressions & Logic

Any Of

Value must satisfy at least one of:

• AnonymousSlotExpression({‘range’: ‘StixArtifact’})
• AnonymousSlotExpression({‘range’: ‘StixFile’})

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	stix:body_raw_ref
native	attack:body_raw_ref

LinkML Source

name: body_raw_ref
description: Specifies the contents of non-textual MIME parts, that is those whose
  content_type does not start with text/, as a reference to an Artifact Object or
  File Object.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:body_raw_ref
domain_of:
- StixMimePart
range: StixCyberObservableObject
pattern: ^(artifact|file)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
any_of:
- range: StixArtifact
- range: StixFile