Skip to content
attack

Slot: to_refs

Specifies the mailboxes that are ‘To:’ recipients of the email message.

URI: stix:to_refs

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixEmailMessage The Email Message Object represents an instance of an email message no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range StixEmailAddress
Domain Of StixEmailMessage
Slot URI stix:to_refs

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:to_refs
native attack:to_refs

LinkML Source

Section titled “LinkML Source”
name: to_refs
description: Specifies the mailboxes that are 'To:' recipients of the email message.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:to_refs
domain_of:
- StixEmailMessage
range: StixEmailAddress
multivalued: true
pattern: ^email-addr--[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$
minimum_cardinality: 1