From 7f914e53d80b0c674c4cebc364779bb87747cb8b Mon Sep 17 00:00:00 2001
From: Rich Piazza <rpiazza@mitre.org>
Date: Wed, 8 Sep 2021 09:10:35 -0400
Subject: [PATCH] kill chain doc

---
 docs/stix-mappings.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/stix-mappings.rst b/docs/stix-mappings.rst
index e0199c8..fc7e423 100755
--- a/docs/stix-mappings.rst
+++ b/docs/stix-mappings.rst
@@ -542,6 +542,14 @@ STIX 1.x in XML
         </ttp:Resources>
     </stix:TTP>
 
+Kill Chains
+-----------
+
+    STIX 1.x defined kill_chain objects for the Lockheed Martin Cyber Kill Chain.  These are used by the elevator.  Because they are
+    defined outside of any partiicular content, the objects themselves will only be referred to using Kill_Chain_Phase_Reference object.
+    Other kill chains found in the STIX 2.x will be converted as fully as possible, because all phases of a kill chain may not be present.
+
+
 Location
 ------------------