Skip to content
attack

Slot: indicator_types

The kinds of indicator, such as malicious-activity.

URI: stix:indicator_types

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixIndicator Indicators contain a pattern that can be used to detect suspicious or malicio… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String or 
StixIndicatorType
Domain Of StixIndicator
Slot URI stix:indicator_types

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1
Expressions & Logic

Any Of

Section titled “Any Of”

Value must satisfy at least one of:

  • AnonymousSlotExpression({‘range’: ‘StixIndicatorType’})
  • AnonymousSlotExpression({‘range’: ‘string’})

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:indicator_types
native attack:indicator_types

LinkML Source

Section titled “LinkML Source”
name: indicator_types
description: The kinds of indicator, such as malicious-activity.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:indicator_types
domain_of:
- StixIndicator
range: string
multivalued: true
minimum_cardinality: 1
any_of:
- range: StixIndicatorType
- range: string