Attack Tactic Data Model
The Attack Tactic data model describes the common attributes and approaches employed by adversaries to exploit known weaknesses in cyber-enabled capabilities. It extends the Entity model data model.
The following table details the default attributes of the Attack Tactic data model:
Attribute Name | Attribute Type | Relationship Type | Required |
---|---|---|---|
categories | Text (Multivalued) | N/A | No |
connectorCategories | Text (Multivalued) | N/A | No |
connectorNames | Text (Multivalued) | N/A | No |
createdBy | Text | N/A | No |
dataIntegrationTitles | Text (Multivalued) | N/A | No |
dataModelName | Calculated (Text) | N/A | No |
dateCreated | Date Time | N/A | No |
description | Text Area | N/A | No |
displayName | Calculated (Text) | N/A | Yes |
domain | Text | N/A | No |
flowState | Text | N/A | No |
lastUpdated | Date Time | N/A | No |
lifecycleInactiveDate | Date Time | N/A | No |
lifecyclePurgeDate | Date Time | N/A | No |
lifecycleStatus | Single Choice | N/A | No |
name | Text | N/A | No |
revision | Text | N/A | No |
sourceCreatedDate | Date Time | N/A | No |
sourceLastModified | Date Time | N/A | No |
sourceStatus | Text | N/A | No |
sourceUids | Text (Multivalued) | N/A | No |
sources | Reference (Source model) | SOURCED_FROM | No |
sourcesIcons | Source data models icons | N/A | No |
summary | Text | N/A | No |
uid | Text | N/A | Yes |
updatedBy | Text | N/A | No |
url | Text | N/A | No |
FOOTNOTES
- The attribute names are used in Brinqa Query Language (BQL) queries and Brinqa Condition Language (BCL) predicates.
- In the Type column, Calculated means that the value of the attribute is computed by executing a script. The text in the parentheses after Calculated denotes the type of the outcome. For additional information, see Calculated attributes.
- In the Type column, Reference means that two data models are related. The name in the parentheses after Reference indicates the other data model.
- The Relationship Type column only applies to the Category and Reference type attributes. You can use the relationship type keyword in BQL queries.