Skip to content
attack

Slot: tool_types

The kinds of tool, such as remote-access.

URI: stix:tool_types

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
StixTool Tools are legitimate software that can be used by threat actors to perform at… no
AttackTool A tool: software, often legitimate, that an adversary uses, such as a penetra… no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String or 
StixToolType
Domain Of StixTool
Slot URI stix:tool_types

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1
Expressions & Logic

Any Of

Section titled “Any Of”

Value must satisfy at least one of:

  • AnonymousSlotExpression({‘range’: ‘StixToolType’})
  • AnonymousSlotExpression({‘range’: ‘string’})

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self stix:tool_types
native attack:tool_types

LinkML Source

Section titled “LinkML Source”
name: tool_types
description: The kinds of tool, such as remote-access.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: stix:tool_types
domain_of:
- StixTool
range: string
multivalued: true
minimum_cardinality: 1
any_of:
- range: StixToolType
- range: string