Skip to content
attack

Slot: x_mitre_data_sources (DEPRECATED)

The data that can reveal the technique, each as “Data Source Name: Data Component Name”.

URI: attack:x_mitre_data_sources

Applicable Classes

Section titled “Applicable Classes”
Name Description Modifies Slot
AttackTechnique A technique: how an adversary achieves a tactic’s goal no

Properties

Section titled “Properties”

Type and Range

Section titled “Type and Range”
Property Value
Range String
Domain Of AttackTechnique
Slot URI attack:x_mitre_data_sources

Cardinality and Requirements

Section titled “Cardinality and Requirements”
Property Value
Multivalued Yes
Minimum Cardinality 1

Value Constraints

Section titled “Value Constraints”
Property Value
Regex Pattern ^\s*[^:\s][^:]*:\s*[^:\s][^:]*$

Identifier and Mapping Information

Section titled “Identifier and Mapping Information”

Annotations

Section titled “Annotations”
property value
attack_excluded_domains mobile-attack

Schema Source

Section titled “Schema Source”

Mappings

Section titled “Mappings”
Mapping Type Mapped Value
self attack:x_mitre_data_sources
native attack:x_mitre_data_sources

LinkML Source

Section titled “LinkML Source”
name: x_mitre_data_sources
annotations:
  attack_excluded_domains:
    tag: attack_excluded_domains
    value: mobile-attack
description: 'The data that can reveal the technique, each as "Data Source Name: Data
  Component Name".'
deprecated: The ADM deprecates it in ATT&CK specification 3.3.0 and removes it in
  4.0.0; detection strategies and analytics take its place.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: attack:x_mitre_data_sources
domain_of:
- AttackTechnique
range: string
multivalued: true
pattern: ^\s*[^:\s][^:]*:\s*[^:\s][^:]*$
minimum_cardinality: 1