Skip to content
attack

Slot: roles

The roles that the identity or threat actor plays.

URI: stix:roles

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixIdentity An individual, organization or group, such as ACME, Inc no
StixThreatActor Threat Actors are actual individuals, groups, or organizations believed to be… yes
AttackIdentity The identity of an organization that creates ATT&CK objects; in MITRE’s data,… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String
Domain Of StixIdentity, StixThreatActor
Slot URI stix:roles

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:roles
native attack:roles

LinkML Source

Section titled “LinkML Source”
name: roles
description: The roles that the identity or threat actor plays.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:roles
domain_of:
- StixIdentity
- StixThreatActor
range: string
multivalued: true
minimum_cardinality: 1