misp-galaxy/vocabularies/common/ttp-category.json

51 lines
1.4 KiB
JSON
Raw Normal View History

2017-10-20 11:13:26 +02:00
{
"values": [
{
2017-10-27 10:46:49 +02:00
"description": "Cover vulnerabilities exploit (0day, 1day, nday), exploit kit",
2017-10-20 11:13:26 +02:00
"value": "Exploits"
},
{
2017-10-27 10:46:49 +02:00
"description": "Deep-Dark Web forum, marketplace, hosting, etc",
2017-10-20 11:13:26 +02:00
"value": "Infrastructure"
},
{
2017-10-27 10:46:49 +02:00
"description": "Malware family",
2017-10-20 11:13:26 +02:00
"value": "Malware"
},
{
2017-10-27 10:46:49 +02:00
"description": "Legitimate SW or HW repurposed for malicious use",
2017-10-20 11:13:26 +02:00
"value": "Tools"
},
{
2017-10-27 10:46:49 +02:00
"description": "Does not belong to any of the other category",
2017-10-20 11:13:26 +02:00
"value": "Other"
},
{
2017-10-27 10:46:49 +02:00
"description": "Undetermined category",
2017-10-20 11:13:26 +02:00
"value": "Unknown"
},
{
2017-10-27 10:46:49 +02:00
"description": "Specific attack patterns (specific to a technology, to an author, not widely used, etc)",
2017-10-20 11:13:26 +02:00
"value": "Attack Patterns (S)"
},
{
2017-10-27 10:46:49 +02:00
"description": "Generic attack pattern, mehod, technique",
2017-10-20 11:13:26 +02:00
"value": "Attack Patterns (G)"
},
{
2017-10-27 10:46:49 +02:00
"description": "Non-technical description of threat actor activities (information war, destruction, hybrid, etc)",
2017-10-20 11:13:26 +02:00
"value": "Tactic"
},
{
2017-10-27 10:46:49 +02:00
"description": "Asset being targeted (MacOS, Android, ICS, IoT, Cryptocurrency, ect)",
2017-10-20 11:13:26 +02:00
"value": "Targeting"
}
],
2017-10-27 10:46:49 +02:00
"version" : 2,
2017-10-20 11:13:26 +02:00
"description": "ttp category vocab as defined by Cert EU.",
"source": "Cert EU",
"author": ["Cert EU"],
"uuid": "54e405b6-b017-11e7-b2f7-df581d1a8587",
"type": "ttp-category-vocabulary"
}