Slot: operating_system_refs
The operating systems that the malware family or malware instance is executable on.
URI: stix:operating_system_refs
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| StixMalware | Malicious code: a program inserted into a system, usually covertly, to compro… | no |
| AttackMalware | Malware: commercial, custom or open-source software an adversary uses for mal… | no |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | StixSoftware |
| Domain Of | StixMalware |
| Slot URI | stix:operating_system_refs |
Cardinality and Requirements
Section titled “Cardinality and Requirements”| Property | Value |
|---|---|
| Multivalued | Yes |
| Minimum Cardinality | 1 |
Value Constraints
Section titled “Value Constraints”| Property | Value |
|---|---|
| Regex Pattern | ^software--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$ |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | stix:operating_system_refs |
| native | attack:operating_system_refs |
LinkML Source
Section titled “LinkML Source”name: operating_system_refsdescription: The operating systems that the malware family or malware instance is executable on.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: stix:operating_system_refsdomain_of:- StixMalwarerange: StixSoftwaremultivalued: truepattern: ^software--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$minimum_cardinality: 1