Slot: x_mitre_first_seen_citation
The sources for when the campaign was first seen, each written “(Citation: name)” with no separator, where each name is the source name of one of the campaign’s external references.
URI: attack:x_mitre_first_seen_citation
Applicable Classes
Section titled “Applicable Classes”| Name | Description | Modifies Slot |
|---|---|---|
| AttackCampaign | A campaign: intrusion activity over a stated period against common targets, w… | yes |
Properties
Section titled “Properties”Type and Range
Section titled “Type and Range”| Property | Value |
|---|---|
| Range | String |
| Domain Of | AttackCampaign |
| Slot URI | attack:x_mitre_first_seen_citation |
Value Constraints
Section titled “Value Constraints”| Property | Value |
|---|---|
| Regex Pattern | ^(\(Citation: [^):]*[^):\s][^):]*\))+$ |
Comments
Section titled “Comments”- As in the ADM, a name holds no colon and is not blank.
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:x_mitre_first_seen_citation |
| native | attack:x_mitre_first_seen_citation |
LinkML Source
Section titled “LinkML Source”name: x_mitre_first_seen_citationdescription: 'The sources for when the campaign was first seen, each written "(Citation: name)" with no separator, where each name is the source name of one of the campaign''s external references.'comments:- As in the ADM, a name holds no colon and is not blank.from_schema: https://w3id.org/lmodel/attackrank: 1000slot_uri: attack:x_mitre_first_seen_citationdomain_of:- AttackCampaignrange: stringpattern: '^(\(Citation: [^):]*[^):\s][^):]*\))+$'