KillChainPhaseType Class A cyber kill chain is a phase-based model to describe the stages of an attack, and a cyber kill chain phase is an individual phase within a kill chain definition. The property characterizes an individual phase within a kill chain. Kill_Chain_Phase The property table of the class is given in Table 334. KillChainPhaseType Table . Properties of the class KillChainPhaseType Name Type Multiplicity Description The property specifies a globally unique identifier for the kill chain phase. phase_id When used within a kill chain definition (defined by the class), it KillChainType basicDataTypes: identifies the kill chain phase being defined. When used within a kill chain reference phase_id 0..1 (defined by the class), it must reference an KillChainPhaseReferenceType QualifiedName existing kill chain property (note that this use is similar to the use of the phase_id property elsewhere in STIX.) idref The property captures a descriptive name of the kill chain phase. If the name class is extended by the KillChainPhaseType basicDataTypes: name 0..1 class, this attribute SHOULD be omitted, or if it KillChainPhaseReferenceType NoEmbeddedQuoteString is present, it MUST match the kill chain phase name used in the referenced kill chain. The property specifies the ordinality (e.g., or of this ordinality ‘1’, ‘2’, ‘3’) within the kill chain definition. It should be omitted when the associated kill chain is basicDataTypes: ordinality 0..1 being referenced (defined by the class), but if KillChainPhaseReferenceType Integer the property is present, it MUST match the ordinality of the corresponding phase in the kill chain that is referenced. KillChainPhasesReferenceType Class A cyber kill chain is a phase-based model to describe the stages of an attack, and a cyber kill chain phase is an individual phase within a kill chain definition. The class specifies a set of one or more kill chain phases. KillChainPhasesReferenceType The property of the class is given in Table 335. KillChainPhasesReferenceType
KillChainPhaseType Class A cyber kill chain is a phase-based model to describe the stages of an attack, and a cyber kill chain phase is an individual phase within a kill chain definition. The Kill_Chain_Phase property characterizes an individual phase within a kill chain. The property table of the KillChainPhaseType class is given in Table 334. Table . Properties of the KillChainPhaseType class Name Type Multiplicity Description phase_id basicDataTypes: QualifiedName 0..1 The phase_id property specifies a globally unique identifier for the kill chain phase. When used within a kill chain definition (defined by the KillChainType class), it identifies the kill chain phase being defined. When used within a kill chain reference (defined by the KillChainPhaseReferenceType class), it must reference an existing kill chain phase_id property (note that this use is similar to the use of the idref property elsewhere in STIX.) name basicDataTypes: NoEmbeddedQuoteString 0..1 The name property captures a descriptive name of the kill chain phase. If the KillChainPhaseType class is extended by the KillChainPhaseReferenceType class, this attribute SHOULD be omitted, or if it is present, it MUST match the kill chain phase name used in the referenced kill chain. ordinality basicDataTypes: Integer 0..1 The ordinality property specifies the ordinality (e.g., ‘1’, ‘2’, or ‘3’) of this within the kill chain definition. It should be omitted when the associated kill chain is being referenced (defined by the KillChainPhaseReferenceType class), but if the property is present, it MUST match the ordinality of the corresponding phase in the kill chain that is referenced. KillChainPhasesReferenceType Class A cyber kill chain is a phase-based model to describe the stages of an attack, and a cyber kill chain phase is an individual phase within a kill chain definition. The KillChainPhasesReferenceType class specifies a set of one or more kill chain phases. The property of the KillChainPhasesReferenceType class is given in Table 335.
stix-v1.2.1-part2-common.docx