Skip to content
attack

Slot: src_ref

Specifies the source of the network traffic, as a reference to an Observable Object.

URI: stix:src_ref

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixNetworkTraffic The Network Traffic Object represents arbitrary network traffic that originat… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixCyberObservableObject or 
StixIpv4Address or 
StixIpv6Address or 
StixMacAddress or 
StixDomainName
Domain Of StixNetworkTraffic
Slot URI stix:src_ref

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern `^(ipv4-addr
Expressions & Logic

Any Of

Section titled “Any Of”

Value must satisfy at least one of:

  • AnonymousSlotExpression({‘range’: ‘StixIpv4Address’})
  • AnonymousSlotExpression({‘range’: ‘StixIpv6Address’})
  • AnonymousSlotExpression({‘range’: ‘StixMacAddress’})
  • AnonymousSlotExpression({‘range’: ‘StixDomainName’})

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:src_ref
native attack:src_ref

LinkML Source

Section titled “LinkML Source”
name: src_ref
description: Specifies the source of the network traffic, as a reference to an Observable
  Object.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:src_ref
domain_of:
- StixNetworkTraffic
range: StixCyberObservableObject
pattern: ^(ipv4-addr|ipv6-addr|mac-addr|domain-name)--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
any_of:
- range: StixIpv4Address
- range: StixIpv6Address
- range: StixMacAddress
- range: StixDomainName