Slot: kill_chain_phases

The kill chain phases to which the object corresponds.

URI: stix:kill_chain_phases

Applicable Classes

Name	Description	Modifies Slot
StixAttackPattern	Attack Patterns are a type of TTP that describe ways that adversaries attempt…	no
StixIndicator	Indicators contain a pattern that can be used to detect suspicious or malicio…	no
StixInfrastructure	Infrastructure objects describe systems, software services, and associated ph…	no
StixMalware	Malicious code: a program inserted into a system, usually covertly, to compro…	no
StixTool	Tools are legitimate software that can be used by threat actors to perform at…	no
AttackTechnique	A technique: how an adversary achieves a tactic’s goal	yes
AttackMalware	Malware: commercial, custom or open-source software an adversary uses for mal…	no
AttackTool	A tool: software, often legitimate, that an adversary uses, such as a penetra…	no

Properties

Type and Range

Property	Value
Range	StixKillChainPhase
Domain Of	StixAttackPattern, StixIndicator, StixInfrastructure, StixMalware, StixTool
Slot URI	stix:kill_chain_phases

Cardinality and Requirements

Property	Value
Multivalued	Yes
Minimum Cardinality	1

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	stix:kill_chain_phases
native	attack:kill_chain_phases

LinkML Source

name: kill_chain_phases
description: The kill chain phases to which the object corresponds.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:kill_chain_phases
domain_of:
- StixAttackPattern
- StixIndicator
- StixInfrastructure
- StixMalware
- StixTool
range: StixKillChainPhase
multivalued: true
inlined: true
inlined_as_list: true
minimum_cardinality: 1