Slot: target_ref
The ID of the target (to) object.
URI: stix:target_ref
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| StixRelationship | The Relationship object is used to link together two SDOs in order to describ… | yes |
| AttackRelationship | A relationship between two ATT&CK objects, of one of the seven types ATT&CK u… | no |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | StixObject or StixDomainObject or StixCyberObservableObject |
| Domain Of | StixRelationship |
| Slot URI | stix:target_ref |
Value Constraints
Section titled “Value Constraints”| Property | Value |
|---|---|
| Regex Pattern | `^(?!(relationship |
Expressions & Logic
Any Of
Section titled “Any Of”Value must satisfy at least one of:
- AnonymousSlotExpression({‘range’: ‘StixDomainObject’})
- AnonymousSlotExpression({‘range’: ‘StixCyberObservableObject’})
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | stix:target_ref |
| native | attack:target_ref |
| close | uco-core:target |
LinkML Source
Section titled “LinkML Source”name: target_refdescription: The ID of the target (to) object.from_schema: https://w3id.org/lmodel/attackclose_mappings:- uco-core:targetrank: 1000slot_uri: stix:target_refdomain_of:- StixRelationshiprange: StixObjectpattern: ^(?!(relationship|sighting|bundle|marking-definition|language-content)--)[a-z][a-z0-9-]+[a-z0-9]--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$any_of:- range: StixDomainObject- range: StixCyberObservableObject