Slot: phase_id

The cyber kill chain phase identifier.

URI: ocsf:phase_id Alias: phase_id

Applicable Classes

Name	Description	Modifies Slot
KillChainPhase	The Kill Chain Phase object represents a single phase of a cyber attack,	yes

Properties

Type and Range

Property	Value
Range	PhaseIdEnum
Domain Of	KillChainPhase

Cardinality and Requirements

Property	Value

Aliases

• Kill Chain Phase ID

Identifier and Mapping Information

Annotations

property	value
sibling	phase

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:phase_id
native	ocsf:phase_id

LinkML Source

name: phase_id
annotations:
  sibling:
    tag: sibling
    value: phase
description: The cyber kill chain phase identifier.
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Kill Chain Phase ID
rank: 1000
alias: phase_id
domain_of:
- KillChainPhase
range: PhaseIdEnum