Skip to content

Slot: x_mitre_first_seen_citation

The sources for when the campaign was first seen, each written “(Citation: name)” with no separator, where each name is the source name of one of the campaign’s external references.

URI: attack:x_mitre_first_seen_citation

Name Description Modifies Slot
AttackCampaign A campaign: intrusion activity over a stated period against common targets, w… yes
Property Value
Range String
Domain Of AttackCampaign
Slot URI attack:x_mitre_first_seen_citation
Property Value
Regex Pattern ^(\(Citation: [^):]*[^):\s][^):]*\))+$
  • As in the ADM, a name holds no colon and is not blank.
Mapping Type Mapped Value
self attack:x_mitre_first_seen_citation
native attack:x_mitre_first_seen_citation
name: x_mitre_first_seen_citation
description: 'The sources for when the campaign was first seen, each written "(Citation:
name)" with no separator, where each name is the source name of one of the campaign''s
external references.'
comments:
- As in the ADM, a name holds no colon and is not blank.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
slot_uri: attack:x_mitre_first_seen_citation
domain_of:
- AttackCampaign
range: string
pattern: '^(\(Citation: [^):]*[^):\s][^):]*\))+$'