Skip to content

Slot: first_seen

First time observed.

URI: stix:first_seen Alias: first_seen

Applicable Classes

Name Description Modifies Slot
Malware Malware is a type of TTP that is also known as malicious code and malicious s... no
ThreatActor Threat Actors are actual individuals, groups, or organizations believed to be... no
Campaign A Campaign is a grouping of adversary behavior that describes a set of malici... no
IntrusionSet An Intrusion Set is a grouped set of adversary behavior and resources with co... no
Infrastructure Infrastructure objects describe systems, software services, and associated ph... no
Sighting A Sighting denotes the belief that something in CTI (e no

Properties

Type and Range

Property Value
Range Datetime
Domain Of Campaign, Infrastructure, IntrusionSet, Malware, ThreatActor, Sighting

Cardinality and Requirements

Property Value

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/stix

Mappings

Mapping Type Mapped Value
self stix:first_seen
native stix:first_seen

LinkML Source

name: first_seen
description: First time observed.
from_schema: https://w3id.org/lmodel/stix
rank: 1000
alias: first_seen
domain_of:
- Campaign
- Infrastructure
- IntrusionSet
- Malware
- ThreatActor
- Sighting
range: datetime