Skip to content
attack

Slot: service_dll_refs

Specifies the DLLs loaded by the service, as a reference to one or more File Objects.

URI: stix:service_dll_refs

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixWindowsServiceExtension The Windows Service extension specifies a default extension for capturing pro… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixFile
Domain Of StixWindowsServiceExtension
Slot URI stix:service_dll_refs

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^file--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:service_dll_refs
native attack:service_dll_refs

LinkML Source

Section titled “LinkML Source”
name: service_dll_refs
description: Specifies the DLLs loaded by the service, as a reference to one or more
  File Objects.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:service_dll_refs
domain_of:
- StixWindowsServiceExtension
range: StixFile
multivalued: true
pattern: ^file--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
minimum_cardinality: 1