misp-objects/objects/confidentiality-impact/definition.json

{
  "attributes": {
    "criticality": {
      "description": "Criticality of the impact",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "Not Specified",
        "False Positive",
        "Low",
        "Moderate",
        "High",
        "Extreme"
      ],
      "ui-priority": 0
    },
    "description": {
      "description": "Additional details about the impact.",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "end_time": {
      "description": "The date and time the impact was last recorded.",
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "end_time_fidelity": {
      "description": "Level of fidelity that the `end_time` is recorded in.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "day",
        "hour",
        "minute",
        "month",
        "second",
        "year"
      ],
      "ui-priority": 0
    },
    "information_type": {
      "description": "Type of information that had its confidentiality compromised.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "classified-material",
        "communication",
        "credentials-admin",
        "credentials-user",
        "financial",
        "leval",
        "payment",
        "phi",
        "pii",
        "proprietary"
      ],
      "ui-priority": 0
    },
    "loss_type": {
      "description": "The type of loss that occurred to the relevant information.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "confirmed-loss",
        "contained",
        "exploited-loss",
        "none",
        "suspected-loss"
      ],
      "ui-priority": 0
    },
    "record_count": {
      "description": "The number of records of this type that were compromised.",
      "disable_correlation": true,
      "misp_attribute": "counter",
      "ui-priority": 0
    },
    "record_size": {
      "description": "The amount of data that was compromised in bytes.",
      "disable_correlation": true,
      "misp_attribute": "size-in-bytes",
      "ui-priority": 0
    },
    "recoverability": {
      "description": "Recoverability of this particular impact with respect to feasibility and required time and resources.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "extended",
        "not-applicable",
        "not-recoverable",
        "regular",
        "supplemented"
      ],
      "ui-priority": 0
    },
    "start_time": {
      "description": "The date and time the impact was first recorded.",
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "start_time_fidelity": {
      "description": "Level of fidelity that the `start_time` is recorded in.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "sane_default": [
        "day",
        "hour",
        "minute",
        "month",
        "second",
        "year"
      ],
      "ui-priority": 0
    }
  },
  "description": "Confidentiality Impact object as described in STIX 2.1 Incident object extension.",
  "meta-category": "misc",
  "name": "confidentiality-impact",
  "required": [
    "loss_type"
  ],
  "uuid": "b0027f13-56e4-4c85-9632-3cf81208429b",
  "version": 1
}