Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

KillChainTypeSTIX Common Schema

The KillChainType characterizes a specific Kill Chain definition for reference within specific TTP entries, Indicators and elsewhere.

Fields

Field Name Type Description
@idoptional QName

A globally unique identifier for this kill chain definition.
@nameoptional string

A descriptive name for this kill chain definition.
@defineroptional

The organization or individual responsible for this kill chain definition.
@referenceoptional anyURI

A resource reference for this kill chain definition.
@number_of_phasesoptional

The number of phases in this kill chain definition.
Kill_Chain_Phase1..n KillChainPhaseType

This field specifies the name of an individual phase within this kill chain definition.