@prefix fhir: .
@prefix owl: .
@prefix rdf: .
@prefix rdfs: .
@prefix xsd: .
# - resource -------------------------------------------------------------------
a fhir:ValueSet ;
fhir:nodeRole fhir:treeRoot ;
fhir:id [ fhir:v "MITRE-ATTCK-Tactics"] ; #
fhir:language [ fhir:v "en"] ; #
fhir:text [
fhir:status [ fhir:v "generated" ] ;
fhir:div [ fhir:v ""^^rdf:XMLLiteral ]
] ; #
fhir:url [
fhir:v "https://constir1.github.io/ATTCK2FHIR/ValueSet/MITRE-ATTCK-Tactics"^^xsd:anyURI ;
fhir:l
] ; #
fhir:version [ fhir:v "0.0.5"] ; #
fhir:title [ fhir:v "VS MITRE ATT&CK Tactics"] ; #
fhir:status [ fhir:v "draft"] ; #
fhir:experimental [ fhir:v false] ; #
fhir:date [ fhir:v "2026-04-26T20:36:59+00:00"^^xsd:dateTime] ; #
fhir:publisher [ fhir:v "ATTCK2FHIR IG"] ; #
fhir:contact ( [
fhir:name [ fhir:v "ATTCK2FHIR IG" ] ;
fhir:telecom ( [
fhir:system [ fhir:v "url" ] ;
fhir:value [ fhir:v "https://constir1.github.io/ATTCK2FHIR" ]
] )
] ) ; #
fhir:description [ fhir:v "All MITRE ATT&CK Enterprise Tactics"] ; #
fhir:compose [
fhir:include ( [
fhir:system [
fhir:v "https://constir1.github.io/ATTCK2FHIR/CodeSystem/MITRE-ATTCK-Tactics"^^xsd:anyURI ;
fhir:l
] ;
fhir:concept ( [
fhir:code [ fhir:v "TA0006" ] ;
fhir:display [ fhir:v "Credential Access" ]
] [
fhir:code [ fhir:v "TA0002" ] ;
fhir:display [ fhir:v "Execution" ]
] [
fhir:code [ fhir:v "TA0040" ] ;
fhir:display [ fhir:v "Impact" ]
] [
fhir:code [ fhir:v "TA0003" ] ;
fhir:display [ fhir:v "Persistence" ]
] [
fhir:code [ fhir:v "TA0004" ] ;
fhir:display [ fhir:v "Privilege Escalation" ]
] [
fhir:code [ fhir:v "TA0008" ] ;
fhir:display [ fhir:v "Lateral Movement" ]
] [
fhir:code [ fhir:v "TA0005" ] ;
fhir:display [ fhir:v "Defense Evasion" ]
] [
fhir:code [ fhir:v "TA0010" ] ;
fhir:display [ fhir:v "Exfiltration" ]
] [
fhir:code [ fhir:v "TA0007" ] ;
fhir:display [ fhir:v "Discovery" ]
] [
fhir:code [ fhir:v "TA0009" ] ;
fhir:display [ fhir:v "Collection" ]
] [
fhir:code [ fhir:v "TA0042" ] ;
fhir:display [ fhir:v "Resource Development" ]
] [
fhir:code [ fhir:v "TA0043" ] ;
fhir:display [ fhir:v "Reconnaissance" ]
] [
fhir:code [ fhir:v "TA0011" ] ;
fhir:display [ fhir:v "Command and Control" ]
] [
fhir:code [ fhir:v "TA0001" ] ;
fhir:display [ fhir:v "Initial Access" ]
] )
] )
] . #
# -------------------------------------------------------------------------------------