Skip to content
attack

Slot: host_vm_ref

A description of the virtual machine environment used to host the guest operating system (if applicable) that was used for the dynamic analysis of the malware instance or family.

URI: stix:host_vm_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixMalwareAnalysis Malware Analysis captures the metadata and results of a particular analysis p… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixSoftware
Domain Of StixMalwareAnalysis
Slot URI stix:host_vm_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^software--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:host_vm_ref
native attack:host_vm_ref

LinkML Source

Section titled “LinkML Source”
name: host_vm_ref
description: A description of the virtual machine environment used to host the guest
  operating system (if applicable) that was used for the dynamic analysis of the malware
  instance or family.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:host_vm_ref
domain_of:
- StixMalwareAnalysis
range: StixSoftware
pattern: ^software--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$