From 0e81bbcd660590e2112070578f1db52aaf6dd65e Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Fri, 10 Apr 2020 14:12:02 +0200 Subject: [PATCH 1/2] Incident classification updates This proposal involves new incident categories and adds a section related information classification. --- circl/machinetag.json | 48 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/circl/machinetag.json b/circl/machinetag.json index 9865e5b..b5033d2 100644 --- a/circl/machinetag.json +++ b/circl/machinetag.json @@ -24,6 +24,14 @@ "value": "system-compromise", "expanded": "System compromise" }, + { + "value": "sabotage", + "expanded": "Sabotage" + }, + { + "value": "gdpr-violation", + "expanded": "GDPR Violation" + }, { "value": "scan", "expanded": "Scan" @@ -40,6 +48,14 @@ "value": "phishing", "expanded": "Phishing" }, + { + "value": "whaling", + "expanded": "Whaling" + }, + { + "value": "smishing", + "expanded": "Sms Phishing" + }, { "value": "malware", "expanded": "Malware" @@ -56,6 +72,10 @@ "value": "fastflux", "expanded": "Fastflux" }, + { + "value": "domain-fronting", + "expanded": "Domain Fronting" + }, { "value": "sql-injection", "expanded": "SQL Injection" @@ -88,12 +108,40 @@ "value": "sextortion", "expanded": "sextortion" }, + { + "value": "social-engineering", + "expanded": "Social Engineering" + }, + { + "value": "gdpr-violation", + "expanded": "GDPR Violation" + }, { "value": "covid-19", "expanded": "covid-19" } ] }, + { + "predicate": "information-classfication", + "entry": [{ + "value": "confidential", + "expanded": "Confidential Information (top confidentiality level)" + }, + { + "value": "restricted", + "expanded": "Restricted Information (medium confidentiality level)" + }, + { + "value": "internal-use", + "expanded": "Internal Use Information (lowest level of confidentiality)" + }, + { + "value": "public", + "expanded": "Public Information (everyone can see the information)" + } + ] + }, { "predicate": "topic", "entry": [ From 0e173e44c9b45cb4044659913438bdbc57068250 Mon Sep 17 00:00:00 2001 From: V <45754825+vxsh4d0w@users.noreply.github.com> Date: Fri, 10 Apr 2020 14:18:21 +0200 Subject: [PATCH 2/2] Update machinetag.json --- circl/machinetag.json | 79 ++++++++++++++++++++++--------------------- 1 file changed, 40 insertions(+), 39 deletions(-) diff --git a/circl/machinetag.json b/circl/machinetag.json index b5033d2..a518313 100644 --- a/circl/machinetag.json +++ b/circl/machinetag.json @@ -25,13 +25,13 @@ "expanded": "System compromise" }, { - "value": "sabotage", - "expanded": "Sabotage" - }, - { - "value": "gdpr-violation", - "expanded": "GDPR Violation" - }, + "value": "sabotage", + "expanded": "Sabotage" + }, + { + "value": "gdpr-violation", + "expanded": "GDPR Violation" + }, { "value": "scan", "expanded": "Scan" @@ -49,13 +49,13 @@ "expanded": "Phishing" }, { - "value": "whaling", - "expanded": "Whaling" - }, + "value": "whaling", + "expanded": "Whaling" + }, { - "value": "smishing", - "expanded": "Sms Phishing" - }, + "value": "smishing", + "expanded": "Sms Phishing" + }, { "value": "malware", "expanded": "Malware" @@ -109,13 +109,13 @@ "expanded": "sextortion" }, { - "value": "social-engineering", - "expanded": "Social Engineering" - }, - { - "value": "gdpr-violation", - "expanded": "GDPR Violation" - }, + "value": "social-engineering", + "expanded": "Social Engineering" + }, + { + "value": "gdpr-violation", + "expanded": "GDPR Violation" + }, { "value": "covid-19", "expanded": "covid-19" @@ -123,25 +123,26 @@ ] }, { - "predicate": "information-classfication", - "entry": [{ - "value": "confidential", - "expanded": "Confidential Information (top confidentiality level)" - }, - { - "value": "restricted", - "expanded": "Restricted Information (medium confidentiality level)" - }, - { - "value": "internal-use", - "expanded": "Internal Use Information (lowest level of confidentiality)" - }, - { - "value": "public", - "expanded": "Public Information (everyone can see the information)" - } - ] - }, + "predicate": "information-classfication", + "entry": [ + { + "value": "confidential", + "expanded": "Confidential Information (top confidentiality level)" + }, + { + "value": "restricted", + "expanded": "Restricted Information (medium confidentiality level)" + }, + { + "value": "internal-use", + "expanded": "Internal Use Information (lowest level of confidentiality)" + }, + { + "value": "public", + "expanded": "Public Information (everyone can see the information)" + } + ] + }, { "predicate": "topic", "entry": [