Skip to content
attack

Slot: raw_email_ref

Specifies the raw binary contents of the email message, including both the headers and body, as a reference to an Artifact Object.

URI: stix:raw_email_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixEmailMessage The Email Message Object represents an instance of an email message no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixArtifact
Domain Of StixEmailMessage
Slot URI stix:raw_email_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^artifact--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:raw_email_ref
native attack:raw_email_ref

LinkML Source

Section titled “LinkML Source”
name: raw_email_ref
description: Specifies the raw binary contents of the email message, including both
  the headers and body, as a reference to an Artifact Object.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:raw_email_ref
domain_of:
- StixEmailMessage
range: StixArtifact
pattern: ^artifact--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$