Slot: x_mitre_domains
The ATT&CK domains the object belongs to.
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| AttackTechnique | A technique: how an adversary achieves a tactic’s goal | yes |
| AttackTactic | A tactic: an adversary’s goal, the reason for a technique | yes |
| AttackGroup | A group: a set of related intrusion activity that the security community trac… | yes |
| AttackCampaign | A campaign: intrusion activity over a stated period against common targets, w… | yes |
| AttackMalware | Malware: commercial, custom or open-source software an adversary uses for mal… | yes |
| AttackTool | A tool: software, often legitimate, that an adversary uses, such as a penetra… | yes |
| AttackMitigation | A mitigation: a security concept or class of technology that can stop a techn… | yes |
| AttackMatrix | A matrix: the tactics of a domain, in order, under which its techniques are l… | yes |
| AttackAsset | An asset: a device or system in an industrial control system that techniques … | yes |
| AttackDataSource | A data source: a kind of information that can be collected to detect techniqu… | yes |
| AttackDataComponent | A data component: a specific kind of data, such as process creation, with the… | yes |
| AttackDetectionStrategy | A detection strategy: an approach to detecting a technique, carried out by an… | yes |
| AttackAnalytic | An analytic: detection logic for one platform, with the logs it reads and the… | yes |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | AttackDomain |
| Domain Of | AttackTechnique, AttackTactic, AttackGroup, AttackCampaign, AttackMalware, AttackTool, AttackMitigation, AttackMatrix, AttackAsset, AttackDataSource, AttackDataComponent, AttackDetectionStrategy, AttackAnalytic |
| Slot URI | attack:x_mitre_domains |
Cardinality and Requirements
Section titled “Cardinality and Requirements”| Property | Value |
|---|---|
| Multivalued | Yes |
| Minimum Cardinality | 1 |
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:x_mitre_domains |
| native | attack:x_mitre_domains |
LinkML Source
Section titled “LinkML Source”name: x_mitre_domainsdescription: The ATT&CK domains the object belongs to.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: attack:x_mitre_domainsdomain_of:- AttackTechnique- AttackTactic- AttackGroup- AttackCampaign- AttackMalware- AttackTool- AttackMitigation- AttackMatrix- AttackAsset- AttackDataSource- AttackDataComponent- AttackDetectionStrategy- AttackAnalyticrange: AttackDomainmultivalued: trueminimum_cardinality: 1