The KillChainType characterizes a specific Kill Chain definition for reference within specific TTP entries, Indicators and elsewhere.
Field Name | Type | Description |
---|---|---|
@idoptional | QName |
A globally unique identifier for this kill chain definition. |
@nameoptional | string |
A descriptive name for this kill chain definition. |
@defineroptional |
The organization or individual responsible for this kill chain definition. |
|
@referenceoptional | anyURI |
A resource reference for this kill chain definition. |
@number_of_phasesoptional |
The number of phases in this kill chain definition. |
|
Kill_Chain_Phase1..n | KillChainPhaseType |
This field specifies the name of an individual phase within this kill chain definition. |