misp-objects/objects/victim/definition.json

{
  "requiredOneOf": [
    "name"
  ],
  "attributes": {
    "description": {
      "description": "Description of the victim",
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "name": {
      "description": "The name of the victim targeted. The name can be an organisation or a group of organisations.",
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "classification": {
      "description": "The type of entity being targeted.",
      "misp-attribute": "text",
      "disable_correlation": true,
      "ui-priority": 1,
      "sane_default": [
        "individual",
        "group",
        "organization",
        "class",
        "unknown"
      ]
    },
    "roles": {
      "description": "The list of roles targeted within the victim.",
      "multiple": true,
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "sectors": {
      "description": "The list of sectors that the victim belong to",
      "multiple": true,
      "misp-attribute": "text",
      "ui-priority": 1,
      "sane_default": [
        "agriculture",
        "aerospace",
        "automotive",
        "communications",
        "construction",
        "defence",
        "education",
        "energy",
        "engineering",
        "entertainment",
        "financial­services",
        "government­national",
        "government­regional",
        "government­local",
        "government­public­services",
        "healthcare",
        "hospitality­leisure",
        "infrastructure",
        "insurance",
        "manufacturing",
        "mining",
        "non­profit",
        "pharmaceuticals",
        "retail",
        "technology",
        "telecommunications",
        "transportation",
        "utilities"
      ]
    },
    "regions": {
      "description": "The list of regions or locations from the victim targeted. ISO 3166 should be used.",
      "multiple": true,
      "misp-attribute": "text",
      "ui-priority": 1
    }
  },
  "version": 2,
  "description": "Victim object describes the target of an attack or abuse.",
  "meta-category": "misc",
  "uuid": "a8806e40-39ad-435f-be02-ac2a13d6fc7d",
  "name": "victim"
}