Slot: kill_chain

The <a target='_blank'

href='https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html'>Cyber

Kill Chain® provides a detailed description of each phase and its

associated activities within the broader context of a cyber attack.

URI: ocsf:kill_chain Alias: kill_chain

Applicable Classes

Name	Description	Modifies Slot
FindingInfo	The Finding Information object describes metadata related to a security findi...	no
RelatedEvent	The Related Event object describes an event or another finding related to a	no
Osint	The OSINT (Open Source Intelligence) object contains details related to an	yes
SecurityFinding	Security Finding events describe findings, detections, anomalies, alerts and/...	yes

Properties

Type and Range

Property	Value
Range	KillChainPhase
Domain Of	Osint, RelatedEvent, FindingInfo, SecurityFinding

Cardinality and Requirements

Property	Value
Multivalued	Yes

Aliases

• Kill Chain

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:kill_chain
native	ocsf:kill_chain

LinkML Source

name: kill_chain
description: 'The <a target=''_blank''

  href=''https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html''>Cyber

  Kill Chain®</a> provides a detailed description of each phase and its

  associated activities within the broader context of a cyber attack.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Kill Chain
rank: 1000
alias: kill_chain
domain_of:
- Osint
- RelatedEvent
- FindingInfo
- SecurityFinding
range: KillChainPhase
multivalued: true