Skip to content
attack

Slot: dst_ref

Specifies the destination of the network traffic, as a reference to an Observable Object.

URI: stix:dst_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixNetworkTraffic The Network Traffic Object represents arbitrary network traffic that originat… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixCyberObservableObject or 
StixIpv4Address or 
StixIpv6Address or 
StixMacAddress or 
StixDomainName
Domain Of StixNetworkTraffic
Slot URI stix:dst_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern `^(ipv4-addr
Expressions & Logic

Any Of

Section titled “Any Of”

Value must satisfy at least one of:

  • AnonymousSlotExpression({‘range’: ‘StixIpv4Address’})
  • AnonymousSlotExpression({‘range’: ‘StixIpv6Address’})
  • AnonymousSlotExpression({‘range’: ‘StixMacAddress’})
  • AnonymousSlotExpression({‘range’: ‘StixDomainName’})

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:dst_ref
native attack:dst_ref

LinkML Source

Section titled “LinkML Source”
name: dst_ref
description: Specifies the destination of the network traffic, as a reference to an
  Observable Object.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:dst_ref
domain_of:
- StixNetworkTraffic
range: StixCyberObservableObject
pattern: ^(ipv4-addr|ipv6-addr|mac-addr|domain-name)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
any_of:
- range: StixIpv4Address
- range: StixIpv6Address
- range: StixMacAddress
- range: StixDomainName