misp-objects/objects/course-of-action/definition.json

105 lines
2.7 KiB
JSON
Raw Normal View History

2018-04-11 16:48:05 +02:00
{
"attributes": {
"cost": {
"description": "The estimated cost of applying the course of action.",
2018-04-11 16:48:05 +02:00
"disable_correlation": true,
"misp-attribute": "text",
2018-04-11 16:48:05 +02:00
"sane_default": [
"High",
"Medium",
"Low",
"None",
"Unknown"
],
"ui-priority": 0
2018-04-11 16:48:05 +02:00
},
"description": {
"description": "A description of the course of action.",
"disable_correlation": true,
2018-04-11 16:48:05 +02:00
"misp-attribute": "text",
"ui-priority": 0
2018-04-11 16:48:05 +02:00
},
"efficacy": {
"description": "The estimated efficacy of applying the course of action.",
2018-04-11 16:48:05 +02:00
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"High",
"Medium",
"Low",
"None",
"Unknown"
],
"ui-priority": 0
2018-04-11 16:48:05 +02:00
},
"impact": {
"description": "The estimated impact of applying the course of action.",
"disable_correlation": true,
"misp-attribute": "text",
2018-04-11 16:48:05 +02:00
"sane_default": [
"High",
"Medium",
"Low",
"None",
"Unknown"
],
"ui-priority": 0
2018-04-11 16:48:05 +02:00
},
"name": {
"description": "The name used to identify the course of action.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"objective": {
"description": "The objective of the course of action.",
"disable_correlation": true,
2018-04-11 16:48:05 +02:00
"misp-attribute": "text",
"ui-priority": 0
},
"stage": {
"description": "The stage of the threat management lifecycle that the course of action is applicable to.",
2018-04-11 16:48:05 +02:00
"disable_correlation": true,
"misp-attribute": "text",
2018-04-11 16:48:05 +02:00
"sane_default": [
"Remedy",
"Response",
"Further Analysis Required"
],
"ui-priority": 0
},
"type": {
"description": "The type of the course of action.",
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"Perimeter Blocking",
"Internal Blocking",
"Redirection",
"Redirection (Honey Pot)",
"Hardening",
"Patching",
"Eradication",
"Rebuilding",
"Training",
"Monitoring",
"Physical Access Restrictions",
"Logical Access Restrictions",
"Public Disclosure",
"Diplomatic Actions",
"Policy Actions",
"Other"
],
"ui-priority": 0
2018-04-11 16:48:05 +02:00
}
},
"description": "An object describing a specific measure taken to prevent or respond to an attack.",
"meta-category": "misc",
"name": "course-of-action",
"requiredOneOf": [
"name",
"type"
],
2018-04-11 16:48:05 +02:00
"uuid": "3d1c2c06-68a9-4394-8c8d-258d115f796f",
"version": 1
}