Skip to content

Slot: x_mitre_attack_spec_version

The version of the ATT&CK specification the object follows, as MAJOR.MINOR.PATCH. Without it, an object is read as version 2.0.0.

URI: attack:x_mitre_attack_spec_version

Name Description Modifies Slot
AttackTechnique A technique: how an adversary achieves a tactic’s goal yes
AttackTactic A tactic: an adversary’s goal, the reason for a technique yes
AttackGroup A group: a set of related intrusion activity that the security community trac… yes
AttackCampaign A campaign: intrusion activity over a stated period against common targets, w… yes
AttackMalware Malware: commercial, custom or open-source software an adversary uses for mal… yes
AttackTool A tool: software, often legitimate, that an adversary uses, such as a penetra… yes
AttackMitigation A mitigation: a security concept or class of technology that can stop a techn… yes
AttackMatrix A matrix: the tactics of a domain, in order, under which its techniques are l… yes
AttackCollection A collection: a set of objects, each at one version, published together yes
AttackAsset An asset: a device or system in an industrial control system that techniques … yes
AttackDataSource A data source: a kind of information that can be collected to detect techniqu… yes
AttackDataComponent A data component: a specific kind of data, such as process creation, with the… yes
AttackDetectionStrategy A detection strategy: an approach to detecting a technique, carried out by an… yes
AttackAnalytic An analytic: detection logic for one platform, with the logs it reads and the… yes
AttackRelationship A relationship between two ATT&CK objects, of one of the seven types ATT&CK u… yes
AttackIdentity The identity of an organization that creates ATT&CK objects; in MITRE’s data,… yes
Property Value
Range String
Domain Of AttackTechnique, AttackTactic, AttackGroup, AttackCampaign, AttackMalware, AttackTool, AttackMitigation, AttackMatrix, AttackCollection, AttackAsset, AttackDataSource, AttackDataComponent, AttackDetectionStrategy, AttackAnalytic, AttackRelationship, AttackIdentity
Slot URI attack:x_mitre_attack_spec_version
Property Value
Regex Pattern `^(0
Mapping Type Mapped Value
self attack:x_mitre_attack_spec_version
native attack:x_mitre_attack_spec_version
name: x_mitre_attack_spec_version
description: The version of the ATT&CK specification the object follows, as MAJOR.MINOR.PATCH.
Without it, an object is read as version 2.0.0.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: attack:x_mitre_attack_spec_version
domain_of:
- AttackTechnique
- AttackTactic
- AttackGroup
- AttackCampaign
- AttackMalware
- AttackTool
- AttackMitigation
- AttackMatrix
- AttackCollection
- AttackAsset
- AttackDataSource
- AttackDataComponent
- AttackDetectionStrategy
- AttackAnalytic
- AttackRelationship
- AttackIdentity
range: string
pattern: ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$