Skip to content
attack

Slot: capabilities

The capabilities identified in the malware instance or family.

URI: stix:capabilities

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixMalware Malicious code: a program inserted into a system, usually covertly, to compro… no
AttackMalware Malware: commercial, custom or open-source software an adversary uses for mal… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String or 
StixMalwareCapability
Domain Of StixMalware
Slot URI stix:capabilities

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1
Expressions & Logic

Any Of

Section titled “Any Of”

Value must satisfy at least one of:

  • AnonymousSlotExpression({‘range’: ‘StixMalwareCapability’})
  • AnonymousSlotExpression({‘range’: ‘string’})

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:capabilities
native attack:capabilities

LinkML Source

Section titled “LinkML Source”
name: capabilities
description: The capabilities identified in the malware instance or family.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:capabilities
domain_of:
- StixMalware
range: string
multivalued: true
minimum_cardinality: 1
any_of:
- range: StixMalwareCapability
- range: string