MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity
misp-taxonomies/veris/machinetag.json

8805 lines
165 KiB
JSON
Raw Normal View History

Vocabulary for Event Recording and Incident Sharing (VERIS) added
2015-11-24 09:15:29 +01:00
{
"description": "Vocabulary for Event Recording and Incident Sharing (VERIS)",
"namespace": "veris",
"values": [
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "DZD",
"expanded": "DZD - Algerian Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NAD",
"expanded": "NAD - Namibia Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GHS",
"expanded": "GHS - Ghana Cedi"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "EGP",
"expanded": "EGP - Egyptian Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BGN",
"expanded": "BGN - Bulgarian Lev"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PAB",
"expanded": "PAB - Balboa"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BOB",
"expanded": "BOB - Boliviano"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "DKK",
"expanded": "DKK - Danish Krone"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BWP",
"expanded": "BWP - Pula"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LBP",
"expanded": "LBP - Lebanese Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TZS",
"expanded": "TZS - Tanzanian Shilling"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "VND",
"expanded": "VND - Dong"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AOA",
"expanded": "AOA - Kwanza"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KHR",
"expanded": "KHR - Riel"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MYR",
"expanded": "MYR - Malaysian Ringgit"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KYD",
"expanded": "KYD - Cayman Islands Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LYD",
"expanded": "LYD - Libyan Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "UAH",
"expanded": "UAH - Hryvnia"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "JOD",
"expanded": "JOD - Jordanian Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AWG",
"expanded": "AWG - Aruban Florin"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SAR",
"expanded": "SAR - Saudi Riyal"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "EUR",
"expanded": "EUR - Euro"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "HKD",
"expanded": "HKD - Hong Kong Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CHF",
"expanded": "CHF - Swiss Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GIP",
"expanded": "GIP - Gibraltar Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BYR",
"expanded": "BYR - Belarussian Ruble"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ALL",
"expanded": "ALL - Lek"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MRO",
"expanded": "MRO - Ouguiya"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "HRK",
"expanded": "HRK - Croatian Kuna"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "DJF",
"expanded": "DJF - Djibouti Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SZL",
"expanded": "SZL - Lilangeni"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "THB",
"expanded": "THB - Baht"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "XAF",
"expanded": "XAF - CFA Franc BEAC"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BND",
"expanded": "BND - Brunei Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ISK",
"expanded": "ISK - Iceland Krona"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "UYU",
"expanded": "UYU - Peso Uruguayo"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NIO",
"expanded": "NIO - Cordoba Oro"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LAK",
"expanded": "LAK - Kip"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SYP",
"expanded": "SYP - Syrian Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MAD",
"expanded": "MAD - Moroccan Dirham"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MZN",
"expanded": "MZN - Mozambique Metical"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PHP",
"expanded": "PHP - Philippine Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ZAR",
"expanded": "ZAR - South African Rand"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NPR",
"expanded": "NPR - Nepalese Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NGN",
"expanded": "NGN - Naira"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ZWD",
"expanded": "ZWD - Zimbabwean Dollar A/06"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CRC",
"expanded": "CRC - Costa Rican Colon"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AED",
"expanded": "AED - UAE Dirham"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GBP",
"expanded": "GBP - Pound Sterling"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MWK",
"expanded": "MWK - Kwacha"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LKR",
"expanded": "LKR - Sri Lanka Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PKR",
"expanded": "PKR - Pakistan Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "HUF",
"expanded": "HUF - Forint"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BMD",
"expanded": "BMD - Bermudian Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LSL",
"expanded": "LSL - Loti"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MNT",
"expanded": "MNT - Tugrik"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AMD",
"expanded": "AMD - Armenian Dram"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "UGX",
"expanded": "UGX - Uganda Shilling"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "QAR",
"expanded": "QAR - Qatari Rial"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "XDR",
"expanded": "XDR - SDR (Special Drawing Right)"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "JMD",
"expanded": "JMD - Jamaican Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GEL",
"expanded": "GEL - Lari"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SHP",
"expanded": "SHP - Saint Helena Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AFN",
"expanded": "AFN - Afghani"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SBD",
"expanded": "SBD - Solomon Islands Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KPW",
"expanded": "KPW - North Korean Won"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TRY",
"expanded": "TRY - Turkish Lira"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BDT",
"expanded": "BDT - Taka"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "YER",
"expanded": "YER - Yemeni Rial"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "HTG",
"expanded": "HTG - Gourde"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "XOF",
"expanded": "XOF - CFA Franc BCEAO"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MGA",
"expanded": "MGA - Malagasy Ariary"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ANG",
"expanded": "ANG - Netherlands Antillean Guilder"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LRD",
"expanded": "LRD - Liberian Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "RWF",
"expanded": "RWF - Rwanda Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NOK",
"expanded": "NOK - Norwegian Krone"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MOP",
"expanded": "MOP - Pataca"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "INR",
"expanded": "INR - Indian Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MXN",
"expanded": "MXN - Mexican Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CZK",
"expanded": "CZK - Czech Koruna"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TJS",
"expanded": "TJS - Somoni"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TWD",
"expanded": "TWD - New Taiwan Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BTN",
"expanded": "BTN - Ngultrum"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "COP",
"expanded": "COP - Colombian Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TMT",
"expanded": "TMT - Turkmenistan New Manat"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MUR",
"expanded": "MUR - Mauritius Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "IDR",
"expanded": "IDR - Rupiah"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "HNL",
"expanded": "HNL - Lempira"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "XPF",
"expanded": "XPF - CFP Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "FJD",
"expanded": "FJD - Fiji Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ETB",
"expanded": "ETB - Ethiopian Birr"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PEN",
"expanded": "PEN - Nuevo Sol"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BZD",
"expanded": "BZD - Belize Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ILS",
"expanded": "ILS - New Israeli Sheqel"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "DOP",
"expanded": "DOP - Dominican Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GGP",
"expanded": "GGP - Guernsey pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MDL",
"expanded": "MDL - Moldovan Leu"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BSD",
"expanded": "BSD - Bahamian Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SPL",
"expanded": "SPL - Seborga Luigino"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SEK",
"expanded": "SEK - Swedish Krona"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ZMK",
"expanded": "ZMK - Zambian Kwacha"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "JEP",
"expanded": "JEP - Jersey pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AUD",
"expanded": "AUD - Australian Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SRD",
"expanded": "SRD - Surinam Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CUP",
"expanded": "CUP - Cuban Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BBD",
"expanded": "BBD - Barbados Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KMF",
"expanded": "KMF - Comoro Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KRW",
"expanded": "KRW - South Korean Won"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GMD",
"expanded": "GMD - Dalasi"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "VEF",
"expanded": "VEF - Bolivar "
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "IMP",
"expanded": "IMP - Isle of Man Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CUC",
"expanded": "CUC - Peso Convertible"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TVD",
"expanded": "TVD - Tuvalu Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CLP",
"expanded": "CLP - Chilean Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LTL",
"expanded": "LTL - Lithuanian Litas"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CDF",
"expanded": "CDF - Congolese Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "XCD",
"expanded": "XCD - East Caribbean Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KZT",
"expanded": "KZT - Tenge"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "RUB",
"expanded": "RUB - Russian Ruble"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TTD",
"expanded": "TTD - Trinidad and Tobago Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "OMR",
"expanded": "OMR - Rial Omani"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BRL",
"expanded": "BRL - Brazilian Real"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MMK",
"expanded": "MMK - Kyat"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PLN",
"expanded": "PLN - Zloty"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PYG",
"expanded": "PYG - Guarani"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KES",
"expanded": "KES - Kenyan Shilling"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SVC",
"expanded": "SVC - El Salvador Colon"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MKD",
"expanded": "MKD - Denar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "AZN",
"expanded": "AZN - Azerbaijanian Manat"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TOP",
"expanded": "TOP - Pa'anga"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "MVR",
"expanded": "MVR - Rufiyaa"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "VUV",
"expanded": "VUV - Vatu"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GNF",
"expanded": "GNF - Guinea Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "WST",
"expanded": "WST - Tala"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "IQD",
"expanded": "IQD - Iraqi Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ERN",
"expanded": "ERN - Nakfa"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BAM",
"expanded": "BAM - Convertible Mark"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SCR",
"expanded": "SCR - Seychelles Rupee"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CAD",
"expanded": "CAD - Canadian Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CVE",
"expanded": "CVE - Cape Verde Escudo"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KWD",
"expanded": "KWD - Kuwaiti Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BIF",
"expanded": "BIF - Burundi Franc"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "PGK",
"expanded": "PGK - Kina"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SOS",
"expanded": "SOS - Somali Shilling"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SGD",
"expanded": "SGD - Singapore Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "UZS",
"expanded": "UZS - Uzbekistan Sum"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "STD",
"expanded": "STD - Dobra"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "IRR",
"expanded": "IRR - Iranian Rial"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "CNY",
"expanded": "CNY - Yuan Renminbi"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SLL",
"expanded": "SLL - Leone"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "TND",
"expanded": "TND - Tunisian Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GYD",
"expanded": "GYD - Guyana Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "NZD",
"expanded": "NZD - New Zealand Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "FKP",
"expanded": "FKP - Falkland Islands Pound"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "LVL",
"expanded": "LVL - Latvian Lats"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "USD",
"expanded": "USD - US Dollar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "KGS",
"expanded": "KGS - Som"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "ARS",
"expanded": "ARS - Argentine Peso"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "RON",
"expanded": "RON - New Romanian Leu"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "GTQ",
"expanded": "GTQ - Quetzal"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "RSD",
"expanded": "RSD - Serbian Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "BHD",
"expanded": "BHD - Bahraini Dinar"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "JPY",
"expanded": "JPY - Yen"
}
]
},
{
"predicate": "iso_currency_code",
"entry": [
{
"value": "SDG",
"expanded": "SDG - Sudanese Pound"
}
]
},
{
"predicate": "confidence",
"entry": [
{
"value": "High",
"expanded": "High confidence"
}
]
},
{
"predicate": "confidence",
"entry": [
{
"value": "None",
"expanded": "No confidence"
}
]
},
{
"predicate": "confidence",
"entry": [
{
"value": "Medium",
"expanded": "Medium confidence"
}
]
},
{
"predicate": "confidence",
"entry": [
{
"value": "Low",
"expanded": "Low confidence"
}
]
},
{
"predicate": "targeted",
"entry": [
{
"value": "Targeted",
"expanded": "Targeted: victim chosen as target then actor determined what weaknesses could be exploited"
}
]
},
{
"predicate": "targeted",
"entry": [
{
"value": "NA",
"expanded": "Not applicable"
}
]
},
{
"predicate": "targeted",
"entry": [
{
"value": "Opportunistic",
"expanded": "Opportunistic: victim attacked because they exhibited a weakness the actor knew how to exploit"
}
]
},
{
"predicate": "targeted",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - financial audit",
"expanded": "Internal - financial audit and reconciliation process"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - found documents",
"expanded": "External - Found documents"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - audit",
"expanded": "External - security audit or scan"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - incident response",
"expanded": "External - Notified while investigating another incident"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - unknown",
"expanded": "External - unknown"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - NIDS",
"expanded": "Internal - network IDS or IPS alert"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - emergency response team",
"expanded": "External - Emergency response team"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - fraud detection",
"expanded": "External - fraud detection (e.g., CPP)"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - incident response",
"expanded": "Internal - discovered while responding to another (separate) incident"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - customer",
"expanded": "External - reported by customer or partner affected by the incident"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - audit",
"expanded": "Partner - Audit performed by a partner organization"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - IT review",
"expanded": "Internal - Informal IT review"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - log review",
"expanded": "Internal - log review process or SIEM"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - unknown",
"expanded": "Internal - unknown"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - suspicious traffic",
"expanded": "External - Report of suspicious traffic"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - HIDS",
"expanded": "Internal - host IDS or file integrity monitoring"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - Other",
"expanded": "Partner - Other"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - monitoring service",
"expanded": "External - managed security event monitoring service"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - antivirus",
"expanded": "Partner - Notified by antivirus company but not through AV product"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - Unknown",
"expanded": "Partner - Unknown"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - security alarm",
"expanded": "Internal - physical security system alarm"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - law enforcement",
"expanded": "Internal - notified by law enforcement or government agency"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - antivirus",
"expanded": "Internal - antivirus alert"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - infrastructure monitoring",
"expanded": "Internal - Infrastructure monitoring"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - incident response",
"expanded": "Partner - notified while investigating another incident"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - data loss prevention",
"expanded": "Internal - Data loss prevention software"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - fraud detection",
"expanded": "Internal - fraud detection mechanism"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Prt - monitoring service",
"expanded": "Partner - Reported by a monitoring service"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Int - reported by employee",
"expanded": "Internal - reported by employee who saw something odd"
}
]
},
{
"predicate": "discovery_method",
"entry": [
{
"value": "Ext - actor disclosure",
"expanded": "External - disclosed by threat agent (e.g., public brag, private blackmail)"
}
]
},
{
"predicate": "cost_corrective_action",
"entry": [
{
"value": "Simple and cheap",
"expanded": "Simple and cheap"
}
]
},
{
"predicate": "cost_corrective_action",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "cost_corrective_action",
"entry": [
{
"value": "Something in-between",
"expanded": "Something in-between"
}
]
},
{
"predicate": "cost_corrective_action",
"entry": [
{
"value": "Difficult and expensive",
"expanded": "Difficult and expensive"
}
]
},
{
"predicate": "security_incident",
"entry": [
{
"value": "Suspected",
"expanded": "Suspected"
}
]
},
{
"predicate": "security_incident",
"entry": [
{
"value": "Confirmed",
"expanded": "Yes - Confirmed"
}
]
},
{
"predicate": "security_incident",
"entry": [
{
"value": "Near miss",
"expanded": "Near miss (actions did not compromise asset)"
}
]
},
{
"predicate": "security_incident",
"entry": [
{
"value": "False positive",
"expanded": "False positive (response triggered, but no incident)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BD",
"expanded": "Bangladesh"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BE",
"expanded": "Belgium"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BF",
"expanded": "Burkina Faso"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BG",
"expanded": "Bulgaria"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BA",
"expanded": "Bosnia and Herzegovina"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BB",
"expanded": "Barbados"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "WF",
"expanded": "Wallis and Futuna Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BL",
"expanded": "Saint-Barthelemy"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BM",
"expanded": "Bermuda"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BN",
"expanded": "Brunei Darussalam"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BO",
"expanded": "Bolivia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BH",
"expanded": "Bahrain"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BI",
"expanded": "Burundi"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BJ",
"expanded": "Benin"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BT",
"expanded": "Bhutan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "JM",
"expanded": "Jamaica"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BV",
"expanded": "Bouvet Island"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BW",
"expanded": "Botswana"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "WS",
"expanded": "Samoa"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BQ",
"expanded": "Bonaire, Saint Eustatius and Saba"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BR",
"expanded": "Brazil"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BS",
"expanded": "Bahamas"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "JE",
"expanded": "Jersey"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BY",
"expanded": "Belarus"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "BZ",
"expanded": "Belize"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "RU",
"expanded": "Russian Federation"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "RW",
"expanded": "Rwanda"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "RS",
"expanded": "Serbia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TL",
"expanded": "Timor-Leste"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "RE",
"expanded": "Reunion"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TM",
"expanded": "Turkmenistan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TJ",
"expanded": "Tajikistan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "RO",
"expanded": "Romania"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TK",
"expanded": "Tokelau"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GW",
"expanded": "Guinea-Bissau"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GU",
"expanded": "Guam"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GT",
"expanded": "Guatemala"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GS",
"expanded": "South Georgia and the South Sandwich Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GR",
"expanded": "Greece"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GQ",
"expanded": "Equatorial Guinea"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GP",
"expanded": "Guadeloupe"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "JP",
"expanded": "Japan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GY",
"expanded": "Guyana"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GG",
"expanded": "Guernsey"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GF",
"expanded": "French Guiana"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GE",
"expanded": "Georgia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GD",
"expanded": "Grenada"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GB",
"expanded": "United Kingdom"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GA",
"expanded": "Gabon"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SV",
"expanded": "El Salvador"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GN",
"expanded": "Guinea"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GM",
"expanded": "Gambia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GL",
"expanded": "Greenland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GI",
"expanded": "Gibraltar"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "GH",
"expanded": "Ghana"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "OM",
"expanded": "Oman"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TN",
"expanded": "Tunisia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "JO",
"expanded": "Jordan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HR",
"expanded": "Croatia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HT",
"expanded": "Haiti"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HU",
"expanded": "Hungary"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HK",
"expanded": "Hong Kong"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HN",
"expanded": "Honduras"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "HM",
"expanded": "Heard Island and McDonal Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VE",
"expanded": "Venezuela (Bolivarian Republic of)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PR",
"expanded": "Puerto Rico"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PS",
"expanded": "Palestinian Territory, Occupied"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PW",
"expanded": "Palau"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PT",
"expanded": "Portugal"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SJ",
"expanded": "Svalbard and Jan Mayen Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PY",
"expanded": "Paraguay"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IQ",
"expanded": "Iraq"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PA",
"expanded": "Panama"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PF",
"expanded": "French Polynesia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PG",
"expanded": "Papua New Guinea"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PE",
"expanded": "Peru"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PK",
"expanded": "Pakistan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PH",
"expanded": "Philippines"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PN",
"expanded": "Pitcairn"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PL",
"expanded": "Poland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "PM",
"expanded": "Saint Pierre and Miquelon"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ZM",
"expanded": "Zambia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "EH",
"expanded": "Western Sahara"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "EE",
"expanded": "Estonia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "EG",
"expanded": "Egypt"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ZA",
"expanded": "South Africa"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "EC",
"expanded": "Ecuador"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IT",
"expanded": "Italy"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VN",
"expanded": "Viet Nam"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SB",
"expanded": "Solomon Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ET",
"expanded": "Ethiopia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SO",
"expanded": "Somalia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ZW",
"expanded": "Zimbabwe"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SA",
"expanded": "Saudi Arabia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ES",
"expanded": "Spain"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ER",
"expanded": "Eritrea"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ME",
"expanded": "Montenegro"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MD",
"expanded": "Moldova, Republic of"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MG",
"expanded": "Madagascar"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MF",
"expanded": "Saint Martin (French part)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MA",
"expanded": "Morocco"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MC",
"expanded": "Monaco"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "UZ",
"expanded": "Uzbekistan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MM",
"expanded": "Myanmar"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ML",
"expanded": "Mali"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MO",
"expanded": "Macao"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MN",
"expanded": "Mongolia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MH",
"expanded": "Marshall Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MK",
"expanded": "Macedonia, The former Yugoslav Republic of"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MU",
"expanded": "Mauritius"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MT",
"expanded": "Malta"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MW",
"expanded": "Malawi"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MV",
"expanded": "Maldives"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MQ",
"expanded": "Martinique"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MP",
"expanded": "Northern Mariana Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MS",
"expanded": "Montserrat"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MR",
"expanded": "Mauritania"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IM",
"expanded": "Isle of Man"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "UG",
"expanded": "Uganda"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TZ",
"expanded": "Tanzania, United Republic of"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MY",
"expanded": "Malaysia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MX",
"expanded": "Mexico"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IL",
"expanded": "Israel"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FR",
"expanded": "France"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IO",
"expanded": "British Virgin Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SH",
"expanded": "Saint Helena"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FI",
"expanded": "Finland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FJ",
"expanded": "Fiji"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FK",
"expanded": "Faeroe Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FM",
"expanded": "Micronesia (Federated States of)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "FO",
"expanded": "Falkland Islands (Malvinas)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NI",
"expanded": "Nicaragua"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NL",
"expanded": "Netherlands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NO",
"expanded": "Norway"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NA",
"expanded": "Namibia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VU",
"expanded": "Vanuatu"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NC",
"expanded": "New Caledonia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NE",
"expanded": "Niger"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NF",
"expanded": "Norfolk Island"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NG",
"expanded": "Nigeria"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NZ",
"expanded": "New Zealand"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NP",
"expanded": "Nepal"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NR",
"expanded": "Nauru"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "NU",
"expanded": "Niue"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CK",
"expanded": "Cook Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CI",
"expanded": "Cote d'Ivoire"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CH",
"expanded": "Switzerland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CO",
"expanded": "Colombia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CN",
"expanded": "China"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CM",
"expanded": "Cameroon"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CL",
"expanded": "Chile"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CC",
"expanded": "Cocos (Keeling) Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CA",
"expanded": "Canada"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CG",
"expanded": "Congo"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CF",
"expanded": "Central African Republic"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CD",
"expanded": "Congo, Democratic Republic of the"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CZ",
"expanded": "Czech Republic"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CY",
"expanded": "Cyprus"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CX",
"expanded": "Christmas Island"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CR",
"expanded": "Costa Rica"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CW",
"expanded": "Curacao"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CV",
"expanded": "Cape Verde"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "CU",
"expanded": "Cuba"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SZ",
"expanded": "Swaziland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SY",
"expanded": "Syrian Arab Republic"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SX",
"expanded": "Sint Maarten (Dutch part)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KG",
"expanded": "Kyrgyzstan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KE",
"expanded": "Kenya"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SS",
"expanded": "South Sudan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SR",
"expanded": "Suriname"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KI",
"expanded": "Kiribati"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KH",
"expanded": "Cambodia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KN",
"expanded": "Saint Kitts and Nevis"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KM",
"expanded": "Comoros"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ST",
"expanded": "Sao Tome and Principe"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SK",
"expanded": "Slovakia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KR",
"expanded": "Korea, Republic of"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SI",
"expanded": "Slovenia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KP",
"expanded": "Korea, Democratic People's Republic of"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KW",
"expanded": "Kuwait"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SN",
"expanded": "Senegal"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SM",
"expanded": "San Marino"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SL",
"expanded": "Sierra Leone"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SC",
"expanded": "Seychelles"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KZ",
"expanded": "Kazakhstan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "KY",
"expanded": "Cayman Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SG",
"expanded": "Singapore"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SE",
"expanded": "Sweden"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "SD",
"expanded": "Sudan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DO",
"expanded": "Dominican Republic"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DM",
"expanded": "Dominica"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DJ",
"expanded": "Djibouti"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DK",
"expanded": "Denmark"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VG",
"expanded": "British Virgin Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DE",
"expanded": "Germany"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "YE",
"expanded": "Yemen"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "DZ",
"expanded": "Algeria"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "US",
"expanded": "United States of America"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "UY",
"expanded": "Uruguay"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "YT",
"expanded": "Mayotte"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "UM",
"expanded": "United States Minor Outlying Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LB",
"expanded": "Lebanon"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LC",
"expanded": "Saint Lucia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LA",
"expanded": "Lao People's Democratic Republic"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TV",
"expanded": "Tuvalu"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TW",
"expanded": "Taiwan, Province of China"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TT",
"expanded": "Trinidad and Tobago"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TR",
"expanded": "Turkey"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LK",
"expanded": "Sri Lanka"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LI",
"expanded": "Liechtenstein"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LV",
"expanded": "Latvia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TO",
"expanded": "Tonga"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LT",
"expanded": "Lithuania"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LU",
"expanded": "Luxembourg"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LR",
"expanded": "Liberia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LS",
"expanded": "Lesotho"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TH",
"expanded": "Thailand"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TF",
"expanded": "French Southern Territories"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TG",
"expanded": "Togo"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TD",
"expanded": "Chad"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "TC",
"expanded": "Turks and Caicos Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "LY",
"expanded": "Libya"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VA",
"expanded": "Holy See"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VC",
"expanded": "Saint Vincent and the Grenadines"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AE",
"expanded": "United Arab Emirates"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AD",
"expanded": "Andorra"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AG",
"expanded": "Antigua and Barbuda"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AF",
"expanded": "Afghanistan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AI",
"expanded": "Anguilla"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "VI",
"expanded": "United States Virgin Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IS",
"expanded": "Iceland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IR",
"expanded": "Iran (Islamic Republic of)"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AM",
"expanded": "Armenia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AL",
"expanded": "Albania"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AO",
"expanded": "Angola"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AQ",
"expanded": "Antarctica"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AS",
"expanded": "American Samoa"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AR",
"expanded": "Argentina"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AU",
"expanded": "Australia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AT",
"expanded": "Austria"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AW",
"expanded": "Aruba"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IN",
"expanded": "India"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AX",
"expanded": "Aland Islands"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "AZ",
"expanded": "Azerbaijan"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "IE",
"expanded": "Ireland"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "ID",
"expanded": "Indonesia"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "UA",
"expanded": "Ukraine"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "QA",
"expanded": "Qatar"
}
]
},
{
"predicate": "country",
"entry": [
{
"value": "MZ",
"expanded": "Mozambique"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Insignificant",
"expanded": "Insignificant: Impact absorbed by normal activities"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Catastrophic",
"expanded": "Catastrophic: A business-ending event (don't choose this if the victim will continue operations)"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Distracting",
"expanded": "Distracting: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Damaging",
"expanded": "Damaging: Real and serious effect on the \"bottom line\" and/or long-term ability to generate revenue"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "impact:overall_rating",
"entry": [
{
"value": "Painful",
"expanded": "Painful: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Grudge",
"expanded": "Grudge or personal offense"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Financial",
"expanded": "Financial or personal gain"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "NA",
"expanded": "Not Applicable (unintentional action)"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Ideology",
"expanded": "Ideology or protest"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Convenience",
"expanded": "Convenience of expediency"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Fun",
"expanded": "Fun, curiosity, or pride"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Fear",
"expanded": "Fear or duress"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Espionage",
"expanded": "Espionage or competitive advantage"
}
]
},
{
"predicate": "actor:motive",
"entry": [
{
"value": "Secondary",
"expanded": "Aid in a different attack"
}
]
},
{
"predicate": "asset:management",
"entry": [
{
"value": "NA",
"expanded": "Not applicable"
}
]
},
{
"predicate": "asset:management",
"entry": [
{
"value": "Internal",
"expanded": "Internally managed"
}
]
},
{
"predicate": "asset:management",
"entry": [
{
"value": "External",
"expanded": "Externally managed"
}
]
},
{
"predicate": "asset:management",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Flash drive",
"expanded": "Media - Flash drive or card"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Print",
"expanded": "Server - Print"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Guard",
"expanded": "People - Guard"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Database",
"expanded": "Server - Database"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - PBX",
"expanded": "Network - Private branch exchange (PBX)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Other",
"expanded": "Media - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Other",
"expanded": "Server - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - System admin",
"expanded": "People - Administrator"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - POS controller",
"expanded": "Server - POS controller"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "T - Other",
"expanded": "Public Terminal - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Camera",
"expanded": "Network - Camera or surveillance system"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Unknown",
"expanded": "Server - Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - DHCP",
"expanded": "Server - DHCP"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - POS terminal",
"expanded": "User Device - POS terminal"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - LAN",
"expanded": "Network - Wired LAN"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Manager",
"expanded": "People - Manager"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Payment card",
"expanded": "Media - Payment card (e.g., magstripe, EMV)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Public WAN",
"expanded": "Network - Public WAN"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Former employee",
"expanded": "People - Former employee"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Authentication",
"expanded": "Server - Authentication"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Mobile phone",
"expanded": "User Device - Mobile phone or smartphone"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Router or switch",
"expanded": "Network - Router or switch"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "T - Kiosk",
"expanded": "Public Terminal - Self-service kiosk"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - HSM",
"expanded": "Network - Hardware security module (HSM)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Peripheral",
"expanded": "User Device - Peripheral (e.g., printer, copier, fax)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Code repository",
"expanded": "Server - Code repository"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - SCADA",
"expanded": "Server - SCADA system"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - End-user",
"expanded": "People - End-user"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - SAN",
"expanded": "Network - Storage area network (SAN)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "T - ATM",
"expanded": "Public Terminal - Automated Teller Machine (ATM)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - RTU",
"expanded": "Network - Remote terminal unit (RTU)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Smart card",
"expanded": "Media - Identity smart card"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - IDS",
"expanded": "Network - IDS or IPs"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - PLC",
"expanded": "Network - Programmable logic controller (PLC)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Other",
"expanded": "Network - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Cashier",
"expanded": "People - Cashier"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Executive",
"expanded": "People - Executive"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Desktop",
"expanded": "User Device - Desktop or workstation"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Tablet",
"expanded": "User Device - Tablet"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Firewall",
"expanded": "Network - Firewall"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Customer",
"expanded": "People - Customer"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Mainframe",
"expanded": "Server - Mainframe"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Directory",
"expanded": "Server - Directory (LDAP, AD)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Auth token",
"expanded": "User Device - Authentication token or device"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Media",
"expanded": "User Device - Media player or recorder"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "T - Gas terminal",
"expanded": "Public Terminal - Gas \"pay-at-the-pump\" terminal"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "T - PED pad",
"expanded": "Public Terminal - Detached PIN pad or card reader"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Disk drive",
"expanded": "Media - Hard disk drive"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - VM host",
"expanded": "Server - Virtual Host"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Auditor",
"expanded": "People - Auditor"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - VoIP phone",
"expanded": "User Device - VoIP phone"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Broadband",
"expanded": "Network - Mobile broadband network"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Other",
"expanded": "User Device - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Telephone",
"expanded": "User Device - Telephone"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Call center",
"expanded": "People - Call center"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Private WAN",
"expanded": "Network - Private WAN"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - DNS",
"expanded": "Server - DNS"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Helpdesk",
"expanded": "People - Helpdesk"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Telephone",
"expanded": "Network - Telephone"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "U - Laptop",
"expanded": "User Device - Laptop"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Log",
"expanded": "Server - Log or event management"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Finance",
"expanded": "People - Finance"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Human resources",
"expanded": "People - Human resources"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - VoIP adapter",
"expanded": "Network - VoIP adapter"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Backup",
"expanded": "Server - Backup"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Partner",
"expanded": "People - Partner"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Maintenance",
"expanded": "People - Maintenance"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Payment switch",
"expanded": "Server - Payment switch or gateway"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - DCS",
"expanded": "Server - Distributed control system (DCS)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Other",
"expanded": "People - Other/Unknown"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Proxy",
"expanded": "Server - Proxy"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Mail",
"expanded": "Server - Mail"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Tapes",
"expanded": "Media - Backup tapes"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Remote access",
"expanded": "Server - Remote access"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - Access reader",
"expanded": "Network - Access control reader (e.g., badge, biometric)"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - File",
"expanded": "Server - File"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "S - Web application",
"expanded": "Server - Web application"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Documents",
"expanded": "Media - Documents"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "N - WLAN",
"expanded": "Network - Wireless LAN"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "P - Developer",
"expanded": "People - Developer"
}
]
},
{
"predicate": "asset:variety",
"entry": [
{
"value": "M - Disk media",
"expanded": "Media - Disk media (e.g., CDs, DVDs)"
}
]
},
{
"predicate": "asset:accessibility",
"entry": [
{
"value": "NA",
"expanded": "Not applicable"
}
]
},
{
"predicate": "asset:accessibility",
"entry": [
{
"value": "Internal",
"expanded": "Internally accessible"
}
]
},
{
"predicate": "asset:accessibility",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:accessibility",
"entry": [
{
"value": "External",
"expanded": "Publicly accessible"
}
]
},
{
"predicate": "asset:accessibility",
"entry": [
{
"value": "Isolated",
"expanded": "Internally isolated or restricted environment"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "3rd party hosted",
"expanded": "Hosted by 3rd party"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "3rd party managed",
"expanded": "Managed by 3rd party"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "3rd party owned",
"expanded": "Owned by 3rd party"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "Personally owned",
"expanded": "Personally owned asset"
}
]
},
{
"predicate": "asset:governance",
"entry": [
{
"value": "Internally isolated",
"expanded": "Isolated internal asset"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "External shared",
"expanded": "Externally hosted in a shared envirnoment"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "External dedicated",
"expanded": "Externally hosted in a dedicated envirnoment"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "NA",
"expanded": "Not applicable"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "Internal",
"expanded": "Internally hosted"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "External",
"expanded": "Externally hosted (unsure if dedicated or shared)"
}
]
},
{
"predicate": "asset:hosting",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "Customer",
"expanded": "Customer owned"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "Victim",
"expanded": "Victim owned"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "NA",
"expanded": "Not applicable"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "Employee",
"expanded": "Employee owned"
}
]
},
{
"predicate": "asset:ownership",
"entry": [
{
"value": "Partner",
"expanded": "Partner owned"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Hosting error",
"expanded": "Misconfiguration or error by hosting provider"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "User breakout",
"expanded": "Elevation of privilege by another customer in shared environment"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Hosting governance",
"expanded": "Lack of security process or procedure by hosting provider"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Customer attack",
"expanded": "Penetration of another web site on shared device"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Hypervisor",
"expanded": "Hypervisor break-out attack"
}
]
},
{
"predicate": "asset:cloud",
"entry": [
{
"value": "Partner application",
"expanded": "Application vulnerability in partner-developed application"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "1001 to 10000",
"expanded": "1,001 to 10,000 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "Over 100000",
"expanded": "Over 100,0001 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "Large",
"expanded": "Large organizations (over 1,000 employees)"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown number of employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "50001 to 100000",
"expanded": "50,001 to 100,000 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "101 to 1000",
"expanded": "101 to 1,000 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "25001 to 50000",
"expanded": "25,001 to 50,000 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "10001 to 25000",
"expanded": "10,001 to 25,000 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "Small",
"expanded": "Small organizations (1,000 employees or less)"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "1 to 10",
"expanded": "1 to 10 employees"
}
]
},
{
"predicate": "victim:employee_count",
"entry": [
{
"value": "11 to 100",
"expanded": "11 to 100 employees"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Months",
"expanded": "Months"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Seconds",
"expanded": "Seconds"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "NA",
"expanded": "NA"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Never",
"expanded": "Never"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Days",
"expanded": "Days"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Years",
"expanded": "Years"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Hours",
"expanded": "Hours"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Weeks",
"expanded": "Weeks"
}
]
},
{
"predicate": "timeline:unit",
"entry": [
{
"value": "Minutes",
"expanded": "Minutes"
}
]
},
{
"predicate": "impact:loss:rating",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "impact:loss:rating",
"entry": [
{
"value": "Major",
"expanded": "Major"
}
]
},
{
"predicate": "impact:loss:rating",
"entry": [
{
"value": "Moderate",
"expanded": "Moderate"
}
]
},
{
"predicate": "impact:loss:rating",
"entry": [
{
"value": "None",
"expanded": "None"
}
]
},
{
"predicate": "impact:loss:rating",
"entry": [
{
"value": "Minor",
"expanded": "Minor"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Legal and regulatory",
"expanded": "Legal and regulatory costs"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Asset and fraud",
"expanded": "Asset and fraud-related losses"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Business disruption",
"expanded": "Business disruption"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Response and recovery",
"expanded": "Response and recovery costs"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Competitive advantage",
"expanded": "Loss of competitive advantage"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Operating costs",
"expanded": "Increased operating costs"
}
]
},
{
"predicate": "impact:loss:variety",
"entry": [
{
"value": "Brand damage",
"expanded": "Brand and market damage"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Misrepresentation",
"expanded": "Misrepresentation"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Modify data",
"expanded": "Modified stored data or content"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Created account",
"expanded": "Created new user account"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Defacement",
"expanded": "Deface content"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Log tampering",
"expanded": "Log tampering or modification"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Modify privileges",
"expanded": "Modified privileges or permissions"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Software installation",
"expanded": "Software installation or code modification"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Fraudulent transaction",
"expanded": "Initiate fraudulent transaction"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Alter behavior",
"expanded": "Influence or alter human behavior"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Hardware tampering",
"expanded": "Hardware tampering or physical alteration"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Modify configuration",
"expanded": "Modified configuration or services"
}
]
},
{
"predicate": "attribute:integrity:variety",
"entry": [
{
"value": "Repurpose",
"expanded": "Repurposed asset for unauthorized function"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Acceleration",
"expanded": "Acceleration"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Interruption",
"expanded": "Interruption"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Loss",
"expanded": "Loss"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Degradation",
"expanded": "Performance degradation"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Obscuration",
"expanded": "Conversion or obscuration"
}
]
},
{
"predicate": "attribute:availability:variety",
"entry": [
{
"value": "Destruction",
"expanded": "Destruction"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Customer",
"expanded": "Customer"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Patient",
"expanded": "Patient"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Student",
"expanded": "Student"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Employee",
"expanded": "Employee"
}
]
},
{
"predicate": "attribute:confidentiality:data_victim",
"entry": [
{
"value": "Partner",
"expanded": "Partner"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Transmitted encrypted",
"expanded": "Transmitted encrypted"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Transmitted unencrypted",
"expanded": "Transmitted unencrypted"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Stored",
"expanded": "Stored"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Transmitted",
"expanded": "Transmitted"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Processed",
"expanded": "Processed"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Stored encrypted",
"expanded": "Stored encrypted"
}
]
},
{
"predicate": "attribute:confidentiality:state",
"entry": [
{
"value": "Stored unencrypted",
"expanded": "Stored unencrypted"
}
]
},
{
"predicate": "attribute:confidentiality:data_disclosure",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:confidentiality:data_disclosure",
"entry": [
{
"value": "Yes",
"expanded": "Yes (confirmed)"
}
]
},
{
"predicate": "attribute:confidentiality:data_disclosure",
"entry": [
{
"value": "Potentially",
"expanded": "Potentially (at risk)"
}
]
},
{
"predicate": "attribute:confidentiality:data_disclosure",
"entry": [
{
"value": "No",
"expanded": "No"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Lateral move",
"expanded": "Lateral move"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Job eval",
"expanded": "Recent poor job evaluation"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Personal issues",
"expanded": "Personal issues"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Let go",
"expanded": "Fired, laid off, or let go"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Reprimanded",
"expanded": "Recently reprimanded"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Hired",
"expanded": "Recently hired"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Passed over",
"expanded": "Recently passed over for promotion"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Demoted",
"expanded": "Recently demoted or hours reduced"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Promoted",
"expanded": "Recently promoted"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Resigned",
"expanded": "Recently resigned"
}
]
},
{
"predicate": "actor:internal:job_change",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "End-user",
"expanded": "End-user or regular employee"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Human resources",
"expanded": "Human resources staff"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Finance",
"expanded": "Finance or accounting staff"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Helpdesk",
"expanded": "Helpdesk staff"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Executive",
"expanded": "Executive or upper management"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Cashier",
"expanded": "Cashier, teller, or waiter"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Manager",
"expanded": "Manager or supervisor"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Guard",
"expanded": "Security guard"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Auditor",
"expanded": "Auditor"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Maintenance",
"expanded": "Maintenance or janitorial staff"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Call center",
"expanded": "Call center staff"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "System admin",
"expanded": "System or network administrator"
}
]
},
{
"predicate": "actor:internal:variety",
"entry": [
{
"value": "Developer",
"expanded": "Software developer"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Customer",
"expanded": "Customer (B2C)"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Organized crime",
"expanded": "Organized or professional criminal group"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Acquaintance",
"expanded": "Relative or acquaintance of employee"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Competitor",
"expanded": "Competitor"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Unaffiliated",
"expanded": "Unaffiliated person(s)"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Force majeure",
"expanded": "Force majeure (nature and chance)"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Former employee",
"expanded": "Former employee (no longer had access)"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Nation-state",
"expanded": "Nation-state"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Activist",
"expanded": "Activist group"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Terrorist",
"expanded": "Terrorist group"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Auditor",
"expanded": "Auditor"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "State-affiliated",
"expanded": "State-sponsored or affiliated group"
}
]
},
{
"predicate": "actor:external:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Remote injection",
"expanded": "Remotely injected by agent (i.e. via SQLi)"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Software update",
"expanded": "Included in automated software update"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Instant messaging",
"expanded": "Instant Messaging"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Email attachment",
"expanded": "Email via user-executed attachment"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Direct install",
"expanded": "Directly installed or inserted by threat agent (after system access)"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Download by malware",
"expanded": "Downloaded and installed by local malware"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Removable media",
"expanded": "Removable storage media or devices"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Web drive-by",
"expanded": "Web via auto-executed or \"drive-by\" infection"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Email link",
"expanded": "Email via embedded link"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Network propagation",
"expanded": "Network propagation"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Email autoexecute",
"expanded": "Email via automatic execution"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Web download",
"expanded": "Web via user-executed or downloaded content"
}
]
},
{
"predicate": "action:malware:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Spam",
"expanded": "Send spam"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Packet sniffer",
"expanded": "Packet sniffer (capture data from network)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Backdoor",
"expanded": "Backdoor (enable remote access)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Exploit vuln",
"expanded": "Exploit vulnerability in code (vs misconfig or weakness)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Password dumper",
"expanded": "Password dumper (extract credential hashes)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Scan network",
"expanded": "Scan or footprint network"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Downloader",
"expanded": "Downloader (pull updates or other malware) "
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Adminware",
"expanded": "System or network utilities (e.g., PsTools, Netcat)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Click fraud",
"expanded": "Click fraud or Bitcoin mining"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Adware",
"expanded": "Adware"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "C2",
"expanded": "Command and control (C2)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Worm",
"expanded": "Worm (propagate to other systems or devices)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Spyware/Keylogger",
"expanded": "Spyware, keylogger or form-grabber (capture user input or activity)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Brute force",
"expanded": "Brute force attack"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Capture app data",
"expanded": "Capture data from application or system process"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Ram scraper",
"expanded": "Ram scraper or memory parser (capture data from volatile memory)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Disable controls",
"expanded": "Disable or interfere with security controls"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Capture stored data",
"expanded": "Capture data stored on system disk"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Ransomware",
"expanded": "Ransomware (encrypt or seize stored data)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Export data",
"expanded": "Export data to another site or system"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Client-side attack",
"expanded": "Client-side or browser attack (e.g., redirection, XSS, MitB)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "SQL injection",
"expanded": "SQL injection attack"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Rootkit",
"expanded": "Rootkit (maintain local privileges and stealth)"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "Destroy data",
"expanded": "Destroy or corrupt stored data"
}
]
},
{
"predicate": "action:malware:variety",
"entry": [
{
"value": "DoS",
"expanded": "DoS attack"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "In-person",
"expanded": "In-person"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Social media",
"expanded": "Social media or networking"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Documents",
"expanded": "Documents"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "SMS",
"expanded": "SMS or texting"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Phone",
"expanded": "Phone"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Website",
"expanded": "Website"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "IM",
"expanded": "Instant messaging"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Removable media",
"expanded": "Removable storage media"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Email",
"expanded": "Email"
}
]
},
{
"predicate": "action:social:vector",
"entry": [
{
"value": "Software",
"expanded": "Software"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Customer",
"expanded": "Customer (B2C)"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "End-user",
"expanded": "End-user or regular employee"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Human resources",
"expanded": "Human resources staff"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Finance",
"expanded": "Finance or accounting staff"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Helpdesk",
"expanded": "Helpdesk staff"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Executive",
"expanded": "Executive or upper management"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Cashier",
"expanded": "Cashier, teller or waiter"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Manager",
"expanded": "Manager or supervisor"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Former employee",
"expanded": "Former employee"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Guard",
"expanded": "Security guard"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Auditor",
"expanded": "Auditor"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Maintenance",
"expanded": "Maintenance or janitorial staff"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Call center",
"expanded": "Call center staff"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Partner",
"expanded": "Partner (B2B)"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "System admin",
"expanded": "System or network administrator"
}
]
},
{
"predicate": "action:social:target",
"entry": [
{
"value": "Developer",
"expanded": "Software developer"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Scam",
"expanded": "Online scam or hoax (e.g., scareware, 419 scam, auction fraud)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Phishing",
"expanded": "Phishing (or any type of *ishing)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Elicitation",
"expanded": "Elicitation (subtle extraction of info through conversation)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Spam",
"expanded": "Spam (unsolicited or undesired email and advertisements)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Influence",
"expanded": "Influence tactics (Leveraging authority or obligation, framing, etc)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Propaganda",
"expanded": "Propaganda or disinformation"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Forgery",
"expanded": "Forgery or counterfeiting (fake hardware, software, documents, etc)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Bribery",
"expanded": "Bribery or solicitation"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Pretexting",
"expanded": "Pretexting (dialogue leveraging invented scenario)"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Extortion",
"expanded": "Extortion or blackmail"
}
]
},
{
"predicate": "action:social:variety",
"entry": [
{
"value": "Baiting",
"expanded": "Baiting (planting infected media)"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Hazmat",
"expanded": "Hazardous material"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Temperature",
"expanded": "Extreme temperature"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Hurricane",
"expanded": "Hurricane"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Ice",
"expanded": "Ice and snow"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Meteorite",
"expanded": "Meteorite"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Pathogen",
"expanded": "Pathogen"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Landslide",
"expanded": "Landslide"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Tornado",
"expanded": "Tornado"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Leak",
"expanded": "Water leak"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Earthquake",
"expanded": "Earthquake"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Particulates",
"expanded": "Particulate matter (e.g., dust, smoke)"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Power failure",
"expanded": "Power failure or fluctuation"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "EMI",
"expanded": "Electromagnetic interference (EMI)"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Humidity",
"expanded": "Humidity"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Tsunami",
"expanded": "Tsunami"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "ESD",
"expanded": "Electrostatic discharge (ESD)"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Deterioration",
"expanded": "Deterioration and degradation"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Volcano",
"expanded": "Volcanic eruption"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Lightning",
"expanded": "Lightning"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Wind",
"expanded": "Wind"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Flood",
"expanded": "Flood"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Vermin",
"expanded": "Vermin"
}
]
},
{
"predicate": "action:environmental:variety",
"entry": [
{
"value": "Fire",
"expanded": "Fire"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Random error",
"expanded": "Random error (no reason, no fault)"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Carelessness",
"expanded": "Carelessness"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Inadequate processes",
"expanded": "Inadequate or insufficient processes"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Inadequate technology",
"expanded": "Inadequate or insufficient technology resources"
}
]
},
{
"predicate": "action:error:vector",
"entry": [
{
"value": "Inadequate personnel",
"expanded": "Inadequate or insufficient personnel"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Disposal error",
"expanded": "Disposal error"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Omission",
"expanded": "Omission (something intended, but not done)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Loss",
"expanded": "Loss or misplacement"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Maintenance error",
"expanded": "Maintenance error"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Misinformation",
"expanded": "Misinformation (unintentionally giving false info)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Physical accidents",
"expanded": "Physical accidents (e.g., drops, bumps, spills)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Publishing error",
"expanded": "Publishing error (private info to public doc or site)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Malfunction",
"expanded": "Technical malfunction or glitch"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Capacity shortage",
"expanded": "Poor capacity planning"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Programming error",
"expanded": "Programming error (flaws or bugs in custom code)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Data entry error",
"expanded": "Data entry error"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Gaffe",
"expanded": "Gaffe (social or verbal slip)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Misconfiguration",
"expanded": "Misconfiguration"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Misdelivery",
"expanded": "Misdelivery (send wrong info or to wrong recipient)"
}
]
},
{
"predicate": "action:error:variety",
"entry": [
{
"value": "Classification error",
"expanded": "Classification or labeling error"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "Physical access",
"expanded": "Physical access within corporate facility"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "Remote access",
"expanded": "Remote access connection to corporate network (i.e. VPN)"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "LAN access",
"expanded": "Local network access within corporate facility"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "Non-corporate",
"expanded": "Non-corporate facilities or networks"
}
]
},
{
"predicate": "action:misuse:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Unapproved software",
"expanded": "Use of unapproved software or services"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Illicit content",
"expanded": "Storage or distribution of illicit content"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Unapproved workaround",
"expanded": "Unapproved workaround or shortcut"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Unapproved hardware",
"expanded": "Use of unapproved hardware or devices"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Email misuse",
"expanded": "Inappropriate use of email or IM"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Possession abuse",
"expanded": "Abuse of physical access to asset"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Other",
"expanded": " Other"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Net misuse",
"expanded": "Inappropriate use of network or Web access"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Data mishandling",
"expanded": "Handling of data in an unapproved manner"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Privilege abuse",
"expanded": "Abuse of system access privileges"
}
]
},
{
"predicate": "action:misuse:variety",
"entry": [
{
"value": "Knowledge abuse",
"expanded": "Abuse of private or entrusted knowledge"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Physical access",
"expanded": "Physical access or connection (i.e., at keyboard or via cable) "
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Command shell",
"expanded": "Remote shell"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Backdoor or C2",
"expanded": "Backdoor or command and control channel"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Web application",
"expanded": "Web application"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Desktop sharing",
"expanded": "Graphical desktop sharing (RDP, VNC, PCAnywhere, Citrix)"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "3rd party desktop",
"expanded": "3rd party online desktop sharing (LogMeIn, Go2Assist)"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Partner",
"expanded": "Partner connection or credential"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "VPN",
"expanded": "VPN"
}
]
},
{
"predicate": "action:hacking:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XSS",
"expanded": "Cross-site scripting"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "HTTP Response Splitting",
"expanded": "HTTP Response Splitting"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Buffer overflow",
"expanded": "Buffer overflow"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Format string attack",
"expanded": "Format string attack"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "LDAP injection",
"expanded": "LDAP injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "SSI injection",
"expanded": "SSI injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "MitM",
"expanded": "Man-in-the-middle attack"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Path traversal",
"expanded": "Path traversal"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "URL redirector abuse",
"expanded": "URL redirector abuse"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Use of backdoor or C2",
"expanded": "Use of Backdoor or C2 channel"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Mail command injection",
"expanded": "Mail command injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Virtual machine escape",
"expanded": "Virtual machine escape"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "OS commanding",
"expanded": "OS commanding"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Soap array abuse",
"expanded": "Soap array abuse"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Footprinting",
"expanded": "Footprinting and fingerprinting"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Cryptanalysis",
"expanded": "Cryptanalysis"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "SQLi",
"expanded": "SQL injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XML external entities",
"expanded": "XML external entities"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Abuse of functionality",
"expanded": "Abuse of functionality"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XML injection",
"expanded": "XML injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Routing detour",
"expanded": "Routing detour"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "HTTP response smuggling",
"expanded": "HTTP response smuggling"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Forced browsing",
"expanded": "Forced browsing or predictable resource location"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Cache poisoning",
"expanded": "Cache poisoning"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Null byte injection",
"expanded": "Null byte injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Reverse engineering",
"expanded": "Reverse engineering"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Brute force",
"expanded": "Brute force or password guessing attacks"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Fuzz testing",
"expanded": "Fuzz testing"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Offline cracking",
"expanded": "Offline password or key cracking (e.g., rainbow tables, Hashcat, JtR)"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "CSRF",
"expanded": "Cross-site request forgery"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XML entity expansion",
"expanded": "XML entity expansion"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "RFI",
"expanded": "Remote file inclusion"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Session fixation",
"expanded": "Session fixation"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Integer overflows",
"expanded": "Integer overflows"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XQuery injection",
"expanded": "XQuery injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Pass-the-hash",
"expanded": "Pass-the-hash"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XML attribute blowup",
"expanded": "XML attribute blowup"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Session prediction",
"expanded": "Credential or session prediction"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Use of stolen creds",
"expanded": "Use of stolen authentication credentials"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "HTTP request smuggling",
"expanded": "HTTP request smuggling"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "XPath injection",
"expanded": "XPath injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "DoS",
"expanded": "Denial of service"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Special element injection",
"expanded": "Special element injection"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "HTTP request splitting",
"expanded": "HTTP request splitting"
}
]
},
{
"predicate": "action:hacking:variety",
"entry": [
{
"value": "Session replay",
"expanded": "Session replay"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Personal vehicle",
"expanded": "Personal vehicle"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Visitor privileges",
"expanded": "Given temporary visitor access"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Public facility",
"expanded": "Public facility or area"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Victim grounds",
"expanded": "Victim outdoor grounds"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Uncontrolled location",
"expanded": "The location was uncontrolled (public)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Partner vehicle",
"expanded": "Partner vehicle (e.g., delivery truck)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Victim work area",
"expanded": "Victim private or work area (e.g., office space)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Victim secure area",
"expanded": "Victim high security area (e.g., server room, R&D labs)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Partner facility",
"expanded": "Partner facility or area"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Personal residence",
"expanded": "Personal residence"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Public vehicle",
"expanded": "Public vehicle (e.g., plane, taxi)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Victim public area",
"expanded": "Victim public or customer area (e.g., lobby, storefront)"
}
]
},
{
"predicate": "action:physical:vector",
"entry": [
{
"value": "Privileged access",
"expanded": "Held privileged access to location"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Skimmer",
"expanded": "Installing card skimming device"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Snooping",
"expanded": "Snooping (sneak about to gain info or access)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Tampering",
"expanded": "Tampering (alter physical form or function)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Theft",
"expanded": "Theft (taking assets without permission)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Connection",
"expanded": "Connection"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Surveillance",
"expanded": "Surveillance (monitoring and observation)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Assault",
"expanded": "Assault (threats or acts of physical violence)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Wiretapping",
"expanded": "Wiretapping (Physical tap to comms line)"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Bypassed controls",
"expanded": "Bypassed physical barriers or controls"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Disabled controls",
"expanded": "Disabled physical barriers or controls"
}
]
},
{
"predicate": "action:physical:variety",
"entry": [
{
"value": "Destruction",
"expanded": "Destruction (deliberate damaging or disabling)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Source code",
"expanded": "Source code"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Personal",
"expanded": "Personal or identifying information (e.g., addr, ID#, credit score)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Unknown",
"expanded": "Unknown"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Medical",
"expanded": "Medical records"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Classified",
"expanded": "Classified information"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "System",
"expanded": "System information (e.g., config info, open services)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Digital certificate",
"expanded": "Digital certificate"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Secrets",
"expanded": "Trade secrets"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Internal",
"expanded": "Sensitive internal data (e.g., plans, reports, emails)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Virtual currency",
"expanded": "Virtual currency"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Copyrighted",
"expanded": "Copyrighted material"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Credentials",
"expanded": "Authentication credentials (e.g., pwds, OTPs, biometrics)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Other",
"expanded": "Other"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Payment",
"expanded": "Payment card data (e.g., PAN, PIN, CVV2, Expiration)"
}
]
},
{
"predicate": "attribute:confidentiality:data:variety",
"entry": [
{
"value": "Bank",
"expanded": "Bank account data"
}
]
}
],
"predicates": [
{
"value": "iso_currency_code"
},
{
"value": "confidence"
},
{
"value": "targeted"
},
{
"value": "discovery_method"
},
{
"value": "cost_corrective_action"
},
{
"value": "security_incident"
},
{
"value": "country"
},
{
"value": "impact:overall_rating"
},
{
"value": "actor:motive"
},
{
"value": "asset:management"
},
{
"value": "asset:variety"
},
{
"value": "asset:accessibility"
},
{
"value": "asset:governance"
},
{
"value": "asset:hosting"
},
{
"value": "asset:ownership"
},
{
"value": "asset:cloud"
},
{
"value": "victim:employee_count"
},
{
"value": "timeline:unit"
},
{
"value": "impact:loss:rating"
},
{
"value": "impact:loss:variety"
},
{
"value": "attribute:integrity:variety"
},
{
"value": "attribute:availability:variety"
},
{
"value": "attribute:confidentiality:data_victim"
},
{
"value": "attribute:confidentiality:state"
},
{
"value": "attribute:confidentiality:data_disclosure"
},
{
"value": "actor:internal:job_change"
},
{
"value": "actor:internal:variety"
},
{
"value": "actor:external:variety"
},
{
"value": "action:malware:vector"
},
{
"value": "action:malware:variety"
},
{
"value": "action:social:vector"
},
{
"value": "action:social:target"
},
{
"value": "action:social:variety"
},
{
"value": "action:environmental:variety"
},
{
"value": "action:error:vector"
},
{
"value": "action:error:variety"
},
{
"value": "action:misuse:vector"
},
{
"value": "action:misuse:variety"
},
{
"value": "action:hacking:vector"
},
{
"value": "action:hacking:variety"
},
{
"value": "action:physical:vector"
},
{
"value": "action:physical:variety"
},
{
"value": "attribute:confidentiality:data:variety"
}
]
}