Skip to content
attack

Slot: from_ref

Specifies the value of the ‘From:’ header of the email message.

URI: stix:from_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixEmailMessage The Email Message Object represents an instance of an email message no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixEmailAddress
Domain Of StixEmailMessage
Slot URI stix:from_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:from_ref
native attack:from_ref

LinkML Source

Section titled “LinkML Source”
name: from_ref
description: Specifies the value of the 'From:' header of the email message.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:from_ref
domain_of:
- StixEmailMessage
range: StixEmailAddress
pattern: ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$