Skip to content
attack

Slot: sender_ref

Specifies the value of the ‘From’ field of the email message.

URI: stix:sender_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixEmailMessage The Email Message Object represents an instance of an email message no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixEmailAddress
Domain Of StixEmailMessage
Slot URI stix:sender_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:sender_ref
native attack:sender_ref

LinkML Source

Section titled “LinkML Source”
name: sender_ref
description: Specifies the value of the 'From' field of the email message.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:sender_ref
domain_of:
- StixEmailMessage
range: StixEmailAddress
pattern: ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$