Skip to content
attack

Slot: channel

A channel or event type within a log, such as 1 for process creation in Sysmon.

URI: attack:channel

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
AttackLogSource A log that holds a data component’s data, and a channel within it yes
AttackLogSourceReference A log an analytic reads: a data component and one of its logs and channels yes

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String
Domain Of AttackLogSource, AttackLogSourceReference
Slot URI attack:channel

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern \S

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self attack:channel
native attack:channel

LinkML Source

Section titled “LinkML Source”
name: channel
description: A channel or event type within a log, such as 1 for process creation
  in Sysmon.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: attack:channel
domain_of:
- AttackLogSource
- AttackLogSourceReference
range: string
pattern: \S