Slot: name

A name that identifies the object.

Applicable Classes

Name	Description	Modifies Slot
AttackTactic	A tactic: an adversary’s goal, the reason for a technique	yes
AttackMatrix	A matrix: the tactics of a domain, in order, under which its techniques are l…	yes
AttackCollection	A collection: a set of objects, each at one version, published together	yes
AttackAsset	An asset: a device or system in an industrial control system that techniques …	yes
AttackDataSource	A data source: a kind of information that can be collected to detect techniqu…	yes
AttackDataComponent	A data component: a specific kind of data, such as process creation, with the…	yes
AttackDetectionStrategy	A detection strategy: an approach to detecting a technique, carried out by an…	yes
AttackAnalytic	An analytic: detection logic for one platform, with the logs it reads and the…	yes
AttackRelatedAsset	A name a sector gives to devices like an asset, and how such a device relates…	yes
AttackLogSource	A log that holds a data component’s data, and a channel within it	yes
AttackLogSourceReference	A log an analytic reads: a data component and one of its logs and channels	yes
StixIdentity	An individual, organization or group, such as ACME, Inc	yes
StixMarkingDefinition	A marking definition: a statement, a Traffic Light Protocol (TLP) level or an…	no
StixExtensionDefinition	The STIX Extension Definition object allows producers of threat intelligence …	yes
StixAutonomousSystem	The AS object represents the properties of an Autonomous Systems (AS)	no
StixFile	The File Object represents the properties of a file	no
StixMutex	The Mutex Object represents the properties of a mutual exclusion (mutex) obje…	yes
StixSoftware	The Software Object represents high-level properties associated with software…	yes
StixAlternateDataStream	An NTFS alternate data stream of a file	yes
StixWindowsPeSection	A section of a Windows PE binary	yes
StixWindowsRegistryValue	A value found under a Windows registry key	no
StixAttackPattern	Attack Patterns are a type of TTP that describe ways that adversaries attempt…	yes
StixCampaign	A Campaign is a grouping of adversary behavior that describes a set of malici…	yes
StixCourseOfAction	A Course of Action is an action taken either to prevent an attack or to respo…	yes
StixGrouping	A Grouping object explicitly asserts that the referenced STIX Objects have a …	no
StixIncident	The Incident object in STIX 2	yes
StixIndicator	Indicators contain a pattern that can be used to detect suspicious or malicio…	no
StixInfrastructure	Infrastructure objects describe systems, software services, and associated ph…	yes
StixIntrusionSet	An Intrusion Set is a grouped set of adversary behavior and resources with co…	yes
StixLocation	A geographic location, given as a region, a civic address, a latitude and lon…	no
StixMalware	Malicious code: a program inserted into a system, usually covertly, to compro…	no
StixReport	Reports are collections of threat intelligence focused on one or more topics,…	yes
StixThreatActor	Threat Actors are actual individuals, groups, or organizations believed to be…	yes
StixTool	Tools are legitimate software that can be used by threat actors to perform at…	yes
StixVulnerability	A Vulnerability is a mistake in software that can be directly used by a hacke…	yes
AttackTechnique	A technique: how an adversary achieves a tactic’s goal	no
AttackGroup	A group: a set of related intrusion activity that the security community trac…	no
AttackCampaign	A campaign: intrusion activity over a stated period against common targets, w…	no
AttackMalware	Malware: commercial, custom or open-source software an adversary uses for mal…	no
AttackTool	A tool: software, often legitimate, that an adversary uses, such as a penetra…	no
AttackMitigation	A mitigation: a security concept or class of technology that can stop a techn…	no
AttackIdentity	The identity of an organization that creates ATT&CK objects; in MITRE’s data,…	no
AttackMarkingDefinition	A marking definition for ATT&CK objects, such as MITRE’s copyright statement,…	no

Properties

Type and Range

Property	Value
Range	String
Domain Of	AttackTactic, AttackMatrix, AttackCollection, AttackAsset, AttackDataSource, AttackDataComponent, AttackDetectionStrategy, AttackAnalytic, AttackRelatedAsset, AttackLogSource, AttackLogSourceReference, StixIdentity, StixMarkingDefinition, StixExtensionDefinition, StixAutonomousSystem, StixFile, StixMutex, StixSoftware, StixAlternateDataStream, StixWindowsPeSection, StixWindowsRegistryValue, StixAttackPattern, StixCampaign, StixCourseOfAction, StixGrouping, StixIncident, StixIndicator, StixInfrastructure, StixIntrusionSet, StixLocation, StixMalware, StixReport, StixThreatActor, StixTool, StixVulnerability
Slot URI	stix:name

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	stix:name
native	attack:name
close	uco-core:name

LinkML Source

name: name
description: A name that identifies the object.
from_schema: https://w3id.org/lmodel/attack
close_mappings:
- uco-core:name
rank: 1000
slot_uri: stix:name
domain_of:
- AttackTactic
- AttackMatrix
- AttackCollection
- AttackAsset
- AttackDataSource
- AttackDataComponent
- AttackDetectionStrategy
- AttackAnalytic
- AttackRelatedAsset
- AttackLogSource
- AttackLogSourceReference
- StixIdentity
- StixMarkingDefinition
- StixExtensionDefinition
- StixAutonomousSystem
- StixFile
- StixMutex
- StixSoftware
- StixAlternateDataStream
- StixWindowsPeSection
- StixWindowsRegistryValue
- StixAttackPattern
- StixCampaign
- StixCourseOfAction
- StixGrouping
- StixIncident
- StixIndicator
- StixInfrastructure
- StixIntrusionSet
- StixLocation
- StixMalware
- StixReport
- StixThreatActor
- StixTool
- StixVulnerability
range: string