Slot: x_mitre_attack_spec_version
The version of the ATT&CK specification the object follows, as MAJOR.MINOR.PATCH. Without it, an object is read as version 2.0.0.
URI: attack:x_mitre_attack_spec_version
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| AttackTechnique | A technique: how an adversary achieves a tactic’s goal | yes |
| AttackTactic | A tactic: an adversary’s goal, the reason for a technique | yes |
| AttackGroup | A group: a set of related intrusion activity that the security community trac… | yes |
| AttackCampaign | A campaign: intrusion activity over a stated period against common targets, w… | yes |
| AttackMalware | Malware: commercial, custom or open-source software an adversary uses for mal… | yes |
| AttackTool | A tool: software, often legitimate, that an adversary uses, such as a penetra… | yes |
| AttackMitigation | A mitigation: a security concept or class of technology that can stop a techn… | yes |
| AttackMatrix | A matrix: the tactics of a domain, in order, under which its techniques are l… | yes |
| AttackCollection | A collection: a set of objects, each at one version, published together | yes |
| AttackAsset | An asset: a device or system in an industrial control system that techniques … | yes |
| AttackDataSource | A data source: a kind of information that can be collected to detect techniqu… | yes |
| AttackDataComponent | A data component: a specific kind of data, such as process creation, with the… | yes |
| AttackDetectionStrategy | A detection strategy: an approach to detecting a technique, carried out by an… | yes |
| AttackAnalytic | An analytic: detection logic for one platform, with the logs it reads and the… | yes |
| AttackRelationship | A relationship between two ATT&CK objects, of one of the seven types ATT&CK u… | yes |
| AttackIdentity | The identity of an organization that creates ATT&CK objects; in MITRE’s data,… | yes |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | String |
| Domain Of | AttackTechnique, AttackTactic, AttackGroup, AttackCampaign, AttackMalware, AttackTool, AttackMitigation, AttackMatrix, AttackCollection, AttackAsset, AttackDataSource, AttackDataComponent, AttackDetectionStrategy, AttackAnalytic, AttackRelationship, AttackIdentity |
| Slot URI | attack:x_mitre_attack_spec_version |
Value Constraints
Section titled “Value Constraints”| Property | Value |
|---|---|
| Regex Pattern | `^(0 |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:x_mitre_attack_spec_version |
| native | attack:x_mitre_attack_spec_version |
LinkML Source
Section titled “LinkML Source”name: x_mitre_attack_spec_versiondescription: The version of the ATT&CK specification the object follows, as MAJOR.MINOR.PATCH. Without it, an object is read as version 2.0.0.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: attack:x_mitre_attack_spec_versiondomain_of:- AttackTechnique- AttackTactic- AttackGroup- AttackCampaign- AttackMalware- AttackTool- AttackMitigation- AttackMatrix- AttackCollection- AttackAsset- AttackDataSource- AttackDataComponent- AttackDetectionStrategy- AttackAnalytic- AttackRelationship- AttackIdentityrange: stringpattern: ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$