The MITRE Sub-technique object describes the ATT&CK® or ATLAS™ Sub-technique ID and/or name associated to an attack.
- Extends:
_entity
Attributes
Section titled “Attributes”name
- Type:
string_t - Requirement: recommended
The name of the attack sub-technique. For example: Scanning IP Blocks or User Execution: Unsafe ML Artifacts.
uid
- Type:
string_t - Requirement: recommended
The unique identifier of the attack sub-technique. For example: T1595.001 or AML.T0011.000.
src_url
- Type:
url_t - Requirement: optional
The versioned permalink of the attack sub-technique. For example: https://attack.mitre.org/versions/v14/techniques/T1595/001/.
Constraints
Section titled “Constraints”At least one of: name, uid