{
  "values": [
    {
      "value": "Data Exploitation"
    },
    {
      "value": "Data Exploitation - Analytic Support"
    },
    {
      "value": "Data Exploitation - Translation Support"
    },
    {
      "value": "Financial Resources"
    },
    {
      "value": "Financial Resources - Academic"
    },
    {
      "value": "Financial Resources - Commercial"
    },
    {
      "value": "Financial Resources - Government"
    },
    {
      "value": "Financial Resources - Hacktivist or Grassroot"
    },
    {
      "value": "Financial Resources - Non-Attributable Finance"
    },
    {
      "value": "Planning"
    },
    {
      "value": "Planning - Open-Source Intelligence (OSINT) Gathering"
    },
    {
      "value": "Planning - Operational Cover Plan"
    },
    {
      "value": "Planning - Pre-Operational Surveillance and Reconnaissance"
    },
    {
      "value": "Planning - Target Selection"
    },
    {
      "value": "Skill Development / Recruitment"
    },
    {
      "value": "Skill Development / Recruitment - Contracting and Hiring"
    },
    {
      "value": "Skill Development / Recruitment - Document Exploitation (DOCEX) Training"
    },
    {
      "value": "Skill Development / Recruitment - Internal Training"
    },
    {
      "value": "Skill Development / Recruitment - Military Programs"
    },
    {
      "value": "Skill Development / Recruitment - Security / Hacker Conferences"
    },
    {
      "value": "Skill Development / Recruitment - Underground Forums"
    },
    {
      "value": "Skill Development / Recruitment - University Programs"
    }
  ],
  "version" : 2,
  "description": "The PlanningAndOperationalSupportVocab is the default STIX vocabulary for expressing the planning and operational support functions available to a threat actor.",
  "author": ["STIX"],
  "source": "STIX 1.0",
  "stix": "1.0.1",
  "uuid": "f91f69d2-fcd0-45f2-baeb-4f79f9458da7",
  "type": "planning-and-operational-support-vocabulary"
}