Skip to content
attack

Slot: object_refs

References to the STIX objects that this object is about or holds.

URI: stix:object_refs

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixGrouping A Grouping object explicitly asserts that the referenced STIX Objects have a … yes
StixNote A Note is a comment or note containing informative text to help explain the c… yes
StixObservedData Observed data conveys information that was observed on systems and networks, … yes
StixOpinion An Opinion is an assessment of the correctness of the information in a STIX O… yes
StixReport Reports are collections of threat intelligence focused on one or more topics,… yes

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixObject
Domain Of StixGrouping, StixNote, StixObservedData, StixOpinion, StixReport
Slot URI stix:object_refs

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^[a-z][a-z0-9-]+[a-z0-9]--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:object_refs
native attack:object_refs

LinkML Source

Section titled “LinkML Source”
name: object_refs
description: References to the STIX objects that this object is about or holds.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:object_refs
domain_of:
- StixGrouping
- StixNote
- StixObservedData
- StixOpinion
- StixReport
range: StixObject
multivalued: true
pattern: ^[a-z][a-z0-9-]+[a-z0-9]--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
minimum_cardinality: 1