From 4e0f65371524e4d28f124ac34d2d487f2a800f8e Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Sun, 13 May 2018 11:25:37 +0200 Subject: [PATCH] chg: VERIS taxonomy updated to the latest version --- veris/machinetag.json | 22097 ++++++++++++++++++++++++++++++++-------- 1 file changed, 18003 insertions(+), 4094 deletions(-) diff --git a/veris/machinetag.json b/veris/machinetag.json index 8e49996..13f3579 100644 --- a/veris/machinetag.json +++ b/veris/machinetag.json @@ -1,4080 +1,5 @@ { - "description": "Vocabulary for Event Recording and Incident Sharing (VERIS)", - "namespace": "veris", - "version": 2, - "values": [ - { - "predicate": "iso_currency_code", - "entry": [ - { - "value": "DZD", - "expanded": "DZD - Algerian Dinar" - }, - { - "value": "NAD", - "expanded": "NAD - Namibia Dollar" - }, - { - "value": "GHS", - "expanded": "GHS - Ghana Cedi" - }, - { - "value": "EGP", - "expanded": "EGP - Egyptian Pound" - }, - { - "value": "BGN", - "expanded": "BGN - Bulgarian Lev" - }, - { - "value": "PAB", - "expanded": "PAB - Balboa" - }, - { - "value": "BOB", - "expanded": "BOB - Boliviano" - }, - { - "value": "DKK", - "expanded": "DKK - Danish Krone" - }, - { - "value": "BWP", - "expanded": "BWP - Pula" - }, - { - "value": "LBP", - "expanded": "LBP - Lebanese Pound" - }, - { - "value": "TZS", - "expanded": "TZS - Tanzanian Shilling" - }, - { - "value": "VND", - "expanded": "VND - Dong" - }, - { - "value": "AOA", - "expanded": "AOA - Kwanza" - }, - { - "value": "KHR", - "expanded": "KHR - Riel" - }, - { - "value": "MYR", - "expanded": "MYR - Malaysian Ringgit" - }, - { - "value": "KYD", - "expanded": "KYD - Cayman Islands Dollar" - }, - { - "value": "LYD", - "expanded": "LYD - Libyan Dinar" - }, - { - "value": "UAH", - "expanded": "UAH - Hryvnia" - }, - { - "value": "JOD", - "expanded": "JOD - Jordanian Dinar" - }, - { - "value": "AWG", - "expanded": "AWG - Aruban Florin" - }, - { - "value": "SAR", - "expanded": "SAR - Saudi Riyal" - }, - { - "value": "EUR", - "expanded": "EUR - Euro" - }, - { - "value": "HKD", - "expanded": "HKD - Hong Kong Dollar" - }, - { - "value": "CHF", - "expanded": "CHF - Swiss Franc" - }, - { - "value": "GIP", - "expanded": "GIP - Gibraltar Pound" - }, - { - "value": "BYR", - "expanded": "BYR - Belarussian Ruble" - }, - { - "value": "ALL", - "expanded": "ALL - Lek" - }, - { - "value": "MRO", - "expanded": "MRO - Ouguiya" - }, - { - "value": "HRK", - "expanded": "HRK - Croatian Kuna" - }, - { - "value": "DJF", - "expanded": "DJF - Djibouti Franc" - }, - { - "value": "SZL", - "expanded": "SZL - Lilangeni" - }, - { - "value": "THB", - "expanded": "THB - Baht" - }, - { - "value": "XAF", - "expanded": "XAF - CFA Franc BEAC" - }, - { - "value": "BND", - "expanded": "BND - Brunei Dollar" - }, - { - "value": "ISK", - "expanded": "ISK - Iceland Krona" - }, - { - "value": "UYU", - "expanded": "UYU - Peso Uruguayo" - }, - { - "value": "NIO", - "expanded": "NIO - Cordoba Oro" - }, - { - "value": "LAK", - "expanded": "LAK - Kip" - }, - { - "value": "SYP", - "expanded": "SYP - Syrian Pound" - }, - { - "value": "MAD", - "expanded": "MAD - Moroccan Dirham" - }, - { - "value": "MZN", - "expanded": "MZN - Mozambique Metical" - }, - { - "value": "PHP", - "expanded": "PHP - Philippine Peso" - }, - { - "value": "ZAR", - "expanded": "ZAR - South African Rand" - }, - { - "value": "NPR", - "expanded": "NPR - Nepalese Rupee" - }, - { - "value": "NGN", - "expanded": "NGN - Naira" - }, - { - "value": "ZWD", - "expanded": "ZWD - Zimbabwean Dollar A/06" - }, - { - "value": "CRC", - "expanded": "CRC - Costa Rican Colon" - }, - { - "value": "AED", - "expanded": "AED - UAE Dirham" - }, - { - "value": "GBP", - "expanded": "GBP - Pound Sterling" - }, - { - "value": "MWK", - "expanded": "MWK - Kwacha" - }, - { - "value": "LKR", - "expanded": "LKR - Sri Lanka Rupee" - }, - { - "value": "PKR", - "expanded": "PKR - Pakistan Rupee" - }, - { - "value": "HUF", - "expanded": "HUF - Forint" - }, - { - "value": "BMD", - "expanded": "BMD - Bermudian Dollar" - }, - { - "value": "LSL", - "expanded": "LSL - Loti" - }, - { - "value": "MNT", - "expanded": "MNT - Tugrik" - }, - { - "value": "AMD", - "expanded": "AMD - Armenian Dram" - }, - { - "value": "UGX", - "expanded": "UGX - Uganda Shilling" - }, - { - "value": "QAR", - "expanded": "QAR - Qatari Rial" - }, - { - "value": "XDR", - "expanded": "XDR - SDR (Special Drawing Right)" - }, - { - "value": "JMD", - "expanded": "JMD - Jamaican Dollar" - }, - { - "value": "GEL", - "expanded": "GEL - Lari" - }, - { - "value": "SHP", - "expanded": "SHP - Saint Helena Pound" - }, - { - "value": "AFN", - "expanded": "AFN - Afghani" - }, - { - "value": "SBD", - "expanded": "SBD - Solomon Islands Dollar" - }, - { - "value": "KPW", - "expanded": "KPW - North Korean Won" - }, - { - "value": "TRY", - "expanded": "TRY - Turkish Lira" - }, - { - "value": "BDT", - "expanded": "BDT - Taka" - }, - { - "value": "YER", - "expanded": "YER - Yemeni Rial" - }, - { - "value": "HTG", - "expanded": "HTG - Gourde" - }, - { - "value": "XOF", - "expanded": "XOF - CFA Franc BCEAO" - }, - { - "value": "MGA", - "expanded": "MGA - Malagasy Ariary" - }, - { - "value": "ANG", - "expanded": "ANG - Netherlands Antillean Guilder" - }, - { - "value": "LRD", - "expanded": "LRD - Liberian Dollar" - }, - { - "value": "RWF", - "expanded": "RWF - Rwanda Franc" - }, - { - "value": "NOK", - "expanded": "NOK - Norwegian Krone" - }, - { - "value": "MOP", - "expanded": "MOP - Pataca" - }, - { - "value": "INR", - "expanded": "INR - Indian Rupee" - }, - { - "value": "MXN", - "expanded": "MXN - Mexican Peso" - }, - { - "value": "CZK", - "expanded": "CZK - Czech Koruna" - }, - { - "value": "TJS", - "expanded": "TJS - Somoni" - }, - { - "value": "TWD", - "expanded": "TWD - New Taiwan Dollar" - }, - { - "value": "BTN", - "expanded": "BTN - Ngultrum" - }, - { - "value": "COP", - "expanded": "COP - Colombian Peso" - }, - { - "value": "TMT", - "expanded": "TMT - Turkmenistan New Manat" - }, - { - "value": "MUR", - "expanded": "MUR - Mauritius Rupee" - }, - { - "value": "IDR", - "expanded": "IDR - Rupiah" - }, - { - "value": "HNL", - "expanded": "HNL - Lempira" - }, - { - "value": "XPF", - "expanded": "XPF - CFP Franc" - }, - { - "value": "FJD", - "expanded": "FJD - Fiji Dollar" - }, - { - "value": "ETB", - "expanded": "ETB - Ethiopian Birr" - }, - { - "value": "PEN", - "expanded": "PEN - Nuevo Sol" - }, - { - "value": "BZD", - "expanded": "BZD - Belize Dollar" - }, - { - "value": "ILS", - "expanded": "ILS - New Israeli Sheqel" - }, - { - "value": "DOP", - "expanded": "DOP - Dominican Peso" - }, - { - "value": "GGP", - "expanded": "GGP - Guernsey pound" - }, - { - "value": "MDL", - "expanded": "MDL - Moldovan Leu" - }, - { - "value": "BSD", - "expanded": "BSD - Bahamian Dollar" - }, - { - "value": "SPL", - "expanded": "SPL - Seborga Luigino" - }, - { - "value": "SEK", - "expanded": "SEK - Swedish Krona" - }, - { - "value": "ZMK", - "expanded": "ZMK - Zambian Kwacha" - }, - { - "value": "JEP", - "expanded": "JEP - Jersey pound" - }, - { - "value": "AUD", - "expanded": "AUD - Australian Dollar" - }, - { - "value": "SRD", - "expanded": "SRD - Surinam Dollar" - }, - { - "value": "CUP", - "expanded": "CUP - Cuban Peso" - }, - { - "value": "BBD", - "expanded": "BBD - Barbados Dollar" - }, - { - "value": "KMF", - "expanded": "KMF - Comoro Franc" - }, - { - "value": "KRW", - "expanded": "KRW - South Korean Won" - }, - { - "value": "GMD", - "expanded": "GMD - Dalasi" - }, - { - "value": "VEF", - "expanded": "VEF - Bolivar " - }, - { - "value": "IMP", - "expanded": "IMP - Isle of Man Pound" - }, - { - "value": "CUC", - "expanded": "CUC - Peso Convertible" - }, - { - "value": "TVD", - "expanded": "TVD - Tuvalu Dollar" - }, - { - "value": "CLP", - "expanded": "CLP - Chilean Peso" - }, - { - "value": "LTL", - "expanded": "LTL - Lithuanian Litas" - }, - { - "value": "CDF", - "expanded": "CDF - Congolese Franc" - }, - { - "value": "XCD", - "expanded": "XCD - East Caribbean Dollar" - }, - { - "value": "KZT", - "expanded": "KZT - Tenge" - }, - { - "value": "RUB", - "expanded": "RUB - Russian Ruble" - }, - { - "value": "TTD", - "expanded": "TTD - Trinidad and Tobago Dollar" - }, - { - "value": "OMR", - "expanded": "OMR - Rial Omani" - }, - { - "value": "BRL", - "expanded": "BRL - Brazilian Real" - }, - { - "value": "MMK", - "expanded": "MMK - Kyat" - }, - { - "value": "PLN", - "expanded": "PLN - Zloty" - }, - { - "value": "PYG", - "expanded": "PYG - Guarani" - }, - { - "value": "KES", - "expanded": "KES - Kenyan Shilling" - }, - { - "value": "SVC", - "expanded": "SVC - El Salvador Colon" - }, - { - "value": "MKD", - "expanded": "MKD - Denar" - }, - { - "value": "AZN", - "expanded": "AZN - Azerbaijanian Manat" - }, - { - "value": "TOP", - "expanded": "TOP - Pa'anga" - }, - { - "value": "MVR", - "expanded": "MVR - Rufiyaa" - }, - { - "value": "VUV", - "expanded": "VUV - Vatu" - }, - { - "value": "GNF", - "expanded": "GNF - Guinea Franc" - }, - { - "value": "WST", - "expanded": "WST - Tala" - }, - { - "value": "IQD", - "expanded": "IQD - Iraqi Dinar" - }, - { - "value": "ERN", - "expanded": "ERN - Nakfa" - }, - { - "value": "BAM", - "expanded": "BAM - Convertible Mark" - }, - { - "value": "SCR", - "expanded": "SCR - Seychelles Rupee" - }, - { - "value": "CAD", - "expanded": "CAD - Canadian Dollar" - }, - { - "value": "CVE", - "expanded": "CVE - Cape Verde Escudo" - }, - { - "value": "KWD", - "expanded": "KWD - Kuwaiti Dinar" - }, - { - "value": "BIF", - "expanded": "BIF - Burundi Franc" - }, - { - "value": "PGK", - "expanded": "PGK - Kina" - }, - { - "value": "SOS", - "expanded": "SOS - Somali Shilling" - }, - { - "value": "SGD", - "expanded": "SGD - Singapore Dollar" - }, - { - "value": "UZS", - "expanded": "UZS - Uzbekistan Sum" - }, - { - "value": "STD", - "expanded": "STD - Dobra" - }, - { - "value": "IRR", - "expanded": "IRR - Iranian Rial" - }, - { - "value": "CNY", - "expanded": "CNY - Yuan Renminbi" - }, - { - "value": "SLL", - "expanded": "SLL - Leone" - }, - { - "value": "TND", - "expanded": "TND - Tunisian Dinar" - }, - { - "value": "GYD", - "expanded": "GYD - Guyana Dollar" - }, - { - "value": "NZD", - "expanded": "NZD - New Zealand Dollar" - }, - { - "value": "FKP", - "expanded": "FKP - Falkland Islands Pound" - }, - { - "value": "LVL", - "expanded": "LVL - Latvian Lats" - }, - { - "value": "USD", - "expanded": "USD - US Dollar" - }, - { - "value": "KGS", - "expanded": "KGS - Som" - }, - { - "value": "ARS", - "expanded": "ARS - Argentine Peso" - }, - { - "value": "RON", - "expanded": "RON - New Romanian Leu" - }, - { - "value": "GTQ", - "expanded": "GTQ - Quetzal" - }, - { - "value": "RSD", - "expanded": "RSD - Serbian Dinar" - }, - { - "value": "BHD", - "expanded": "BHD - Bahraini Dinar" - }, - { - "value": "JPY", - "expanded": "JPY - Yen" - }, - { - "value": "SDG", - "expanded": "SDG - Sudanese Pound" - } - ] - }, - { - "predicate": "confidence", - "entry": [ - { - "value": "High", - "expanded": "High confidence" - }, - { - "value": "None", - "expanded": "No confidence" - }, - { - "value": "Medium", - "expanded": "Medium confidence" - }, - { - "value": "Low", - "expanded": "Low confidence" - } - ] - }, - { - "predicate": "targeted", - "entry": [ - { - "value": "Targeted", - "expanded": "Targeted: victim chosen as target then actor determined what weaknesses could be exploited" - }, - { - "value": "NA", - "expanded": "Not applicable" - }, - { - "value": "Opportunistic", - "expanded": "Opportunistic: victim attacked because they exhibited a weakness the actor knew how to exploit" - }, - { - "value": "Unknown", - "expanded": "Unknown" - } - ] - }, - { - "predicate": "discovery_method", - "entry": [ - { - "value": "Int - financial audit", - "expanded": "Internal - financial audit and reconciliation process" - }, - { - "value": "Ext - found documents", - "expanded": "External - Found documents" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Ext - audit", - "expanded": "External - security audit or scan" - }, - { - "value": "Ext - incident response", - "expanded": "External - Notified while investigating another incident" - }, - { - "value": "Ext - unknown", - "expanded": "External - unknown" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Int - NIDS", - "expanded": "Internal - network IDS or IPS alert" - }, - { - "value": "Ext - emergency response team", - "expanded": "External - Emergency response team" - }, - { - "value": "Ext - fraud detection", - "expanded": "External - fraud detection (e.g., CPP)" - }, - { - "value": "Int - incident response", - "expanded": "Internal - discovered while responding to another (separate) incident" - }, - { - "value": "Ext - customer", - "expanded": "External - reported by customer or partner affected by the incident" - }, - { - "value": "Prt - audit", - "expanded": "Partner - Audit performed by a partner organization" - }, - { - "value": "Int - IT review", - "expanded": "Internal - Informal IT review" - }, - { - "value": "Int - log review", - "expanded": "Internal - log review process or SIEM" - }, - { - "value": "Int - unknown", - "expanded": "Internal - unknown" - }, - { - "value": "Ext - suspicious traffic", - "expanded": "External - Report of suspicious traffic" - }, - { - "value": "Int - HIDS", - "expanded": "Internal - host IDS or file integrity monitoring" - }, - { - "value": "Prt - Other", - "expanded": "Partner - Other" - }, - { - "value": "Ext - monitoring service", - "expanded": "External - managed security event monitoring service" - }, - { - "value": "Prt - antivirus", - "expanded": "Partner - Notified by antivirus company but not through AV product" - }, - { - "value": "Prt - Unknown", - "expanded": "Partner - Unknown" - }, - { - "value": "Int - security alarm", - "expanded": "Internal - physical security system alarm" - }, - { - "value": "Ext - law enforcement", - "expanded": "Internal - notified by law enforcement or government agency" - }, - { - "value": "Int - antivirus", - "expanded": "Internal - antivirus alert" - }, - { - "value": "Int - infrastructure monitoring", - "expanded": "Internal - Infrastructure monitoring" - }, - { - "value": "Prt - incident response", - "expanded": "Partner - notified while investigating another incident" - }, - { - "value": "Int - data loss prevention", - "expanded": "Internal - Data loss prevention software" - }, - { - "value": "Int - fraud detection", - "expanded": "Internal - fraud detection mechanism" - }, - { - "value": "Prt - monitoring service", - "expanded": "Partner - Reported by a monitoring service" - }, - { - "value": "Int - reported by employee", - "expanded": "Internal - reported by employee who saw something odd" - }, - { - "value": "Ext - actor disclosure", - "expanded": "External - disclosed by threat agent (e.g., public brag, private blackmail)" - } - ] - }, - { - "predicate": "cost_corrective_action", - "entry": [ - { - "value": "Simple and cheap", - "expanded": "Simple and cheap" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Something in-between", - "expanded": "Something in-between" - }, - { - "value": "Difficult and expensive", - "expanded": "Difficult and expensive" - } - ] - }, - { - "predicate": "security_incident", - "entry": [ - { - "value": "Suspected", - "expanded": "Suspected" - }, - { - "value": "Confirmed", - "expanded": "Yes - Confirmed" - }, - { - "value": "Near miss", - "expanded": "Near miss (actions did not compromise asset)" - }, - { - "value": "False positive", - "expanded": "False positive (response triggered, but no incident)" - } - ] - }, - { - "predicate": "country", - "entry": [ - { - "value": "BD", - "expanded": "Bangladesh" - }, - { - "value": "BE", - "expanded": "Belgium" - }, - { - "value": "BF", - "expanded": "Burkina Faso" - }, - { - "value": "BG", - "expanded": "Bulgaria" - }, - { - "value": "BA", - "expanded": "Bosnia and Herzegovina" - }, - { - "value": "BB", - "expanded": "Barbados" - }, - { - "value": "WF", - "expanded": "Wallis and Futuna Islands" - }, - { - "value": "BL", - "expanded": "Saint-Barthelemy" - }, - { - "value": "BM", - "expanded": "Bermuda" - }, - { - "value": "BN", - "expanded": "Brunei Darussalam" - }, - { - "value": "BO", - "expanded": "Bolivia" - }, - { - "value": "BH", - "expanded": "Bahrain" - }, - { - "value": "BI", - "expanded": "Burundi" - }, - { - "value": "BJ", - "expanded": "Benin" - }, - { - "value": "BT", - "expanded": "Bhutan" - }, - { - "value": "JM", - "expanded": "Jamaica" - }, - { - "value": "BV", - "expanded": "Bouvet Island" - }, - { - "value": "BW", - "expanded": "Botswana" - }, - { - "value": "WS", - "expanded": "Samoa" - }, - { - "value": "BQ", - "expanded": "Bonaire, Saint Eustatius and Saba" - }, - { - "value": "BR", - "expanded": "Brazil" - }, - { - "value": "BS", - "expanded": "Bahamas" - }, - { - "value": "JE", - "expanded": "Jersey" - }, - { - "value": "BY", - "expanded": "Belarus" - }, - { - "value": "BZ", - "expanded": "Belize" - }, - { - "value": "RU", - "expanded": "Russian Federation" - }, - { - "value": "RW", - "expanded": "Rwanda" - }, - { - "value": "RS", - "expanded": "Serbia" - }, - { - "value": "TL", - "expanded": "Timor-Leste" - }, - { - "value": "RE", - "expanded": "Reunion" - }, - { - "value": "TM", - "expanded": "Turkmenistan" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "TJ", - "expanded": "Tajikistan" - }, - { - "value": "RO", - "expanded": "Romania" - }, - { - "value": "TK", - "expanded": "Tokelau" - }, - { - "value": "GW", - "expanded": "Guinea-Bissau" - }, - { - "value": "GU", - "expanded": "Guam" - }, - { - "value": "GT", - "expanded": "Guatemala" - }, - { - "value": "GS", - "expanded": "South Georgia and the South Sandwich Islands" - }, - { - "value": "GR", - "expanded": "Greece" - }, - { - "value": "GQ", - "expanded": "Equatorial Guinea" - }, - { - "value": "GP", - "expanded": "Guadeloupe" - }, - { - "value": "JP", - "expanded": "Japan" - }, - { - "value": "GY", - "expanded": "Guyana" - }, - { - "value": "GG", - "expanded": "Guernsey" - }, - { - "value": "GF", - "expanded": "French Guiana" - }, - { - "value": "GE", - "expanded": "Georgia" - }, - { - "value": "GD", - "expanded": "Grenada" - }, - { - "value": "GB", - "expanded": "United Kingdom" - }, - { - "value": "GA", - "expanded": "Gabon" - }, - { - "value": "SV", - "expanded": "El Salvador" - }, - { - "value": "GN", - "expanded": "Guinea" - }, - { - "value": "GM", - "expanded": "Gambia" - }, - { - "value": "GL", - "expanded": "Greenland" - }, - { - "value": "GI", - "expanded": "Gibraltar" - }, - { - "value": "GH", - "expanded": "Ghana" - }, - { - "value": "OM", - "expanded": "Oman" - }, - { - "value": "TN", - "expanded": "Tunisia" - }, - { - "value": "JO", - "expanded": "Jordan" - }, - { - "value": "HR", - "expanded": "Croatia" - }, - { - "value": "HT", - "expanded": "Haiti" - }, - { - "value": "HU", - "expanded": "Hungary" - }, - { - "value": "HK", - "expanded": "Hong Kong" - }, - { - "value": "HN", - "expanded": "Honduras" - }, - { - "value": "HM", - "expanded": "Heard Island and McDonal Islands" - }, - { - "value": "VE", - "expanded": "Venezuela (Bolivarian Republic of)" - }, - { - "value": "PR", - "expanded": "Puerto Rico" - }, - { - "value": "PS", - "expanded": "Palestinian Territory, Occupied" - }, - { - "value": "PW", - "expanded": "Palau" - }, - { - "value": "PT", - "expanded": "Portugal" - }, - { - "value": "SJ", - "expanded": "Svalbard and Jan Mayen Islands" - }, - { - "value": "PY", - "expanded": "Paraguay" - }, - { - "value": "IQ", - "expanded": "Iraq" - }, - { - "value": "PA", - "expanded": "Panama" - }, - { - "value": "PF", - "expanded": "French Polynesia" - }, - { - "value": "PG", - "expanded": "Papua New Guinea" - }, - { - "value": "PE", - "expanded": "Peru" - }, - { - "value": "PK", - "expanded": "Pakistan" - }, - { - "value": "PH", - "expanded": "Philippines" - }, - { - "value": "PN", - "expanded": "Pitcairn" - }, - { - "value": "PL", - "expanded": "Poland" - }, - { - "value": "PM", - "expanded": "Saint Pierre and Miquelon" - }, - { - "value": "ZM", - "expanded": "Zambia" - }, - { - "value": "EH", - "expanded": "Western Sahara" - }, - { - "value": "EE", - "expanded": "Estonia" - }, - { - "value": "EG", - "expanded": "Egypt" - }, - { - "value": "ZA", - "expanded": "South Africa" - }, - { - "value": "EC", - "expanded": "Ecuador" - }, - { - "value": "IT", - "expanded": "Italy" - }, - { - "value": "VN", - "expanded": "Viet Nam" - }, - { - "value": "SB", - "expanded": "Solomon Islands" - }, - { - "value": "ET", - "expanded": "Ethiopia" - }, - { - "value": "SO", - "expanded": "Somalia" - }, - { - "value": "ZW", - "expanded": "Zimbabwe" - }, - { - "value": "SA", - "expanded": "Saudi Arabia" - }, - { - "value": "ES", - "expanded": "Spain" - }, - { - "value": "ER", - "expanded": "Eritrea" - }, - { - "value": "ME", - "expanded": "Montenegro" - }, - { - "value": "MD", - "expanded": "Moldova, Republic of" - }, - { - "value": "MG", - "expanded": "Madagascar" - }, - { - "value": "MF", - "expanded": "Saint Martin (French part)" - }, - { - "value": "MA", - "expanded": "Morocco" - }, - { - "value": "MC", - "expanded": "Monaco" - }, - { - "value": "UZ", - "expanded": "Uzbekistan" - }, - { - "value": "MM", - "expanded": "Myanmar" - }, - { - "value": "ML", - "expanded": "Mali" - }, - { - "value": "MO", - "expanded": "Macao" - }, - { - "value": "MN", - "expanded": "Mongolia" - }, - { - "value": "MH", - "expanded": "Marshall Islands" - }, - { - "value": "MK", - "expanded": "Macedonia, The former Yugoslav Republic of" - }, - { - "value": "MU", - "expanded": "Mauritius" - }, - { - "value": "MT", - "expanded": "Malta" - }, - { - "value": "MW", - "expanded": "Malawi" - }, - { - "value": "MV", - "expanded": "Maldives" - }, - { - "value": "MQ", - "expanded": "Martinique" - }, - { - "value": "MP", - "expanded": "Northern Mariana Islands" - }, - { - "value": "MS", - "expanded": "Montserrat" - }, - { - "value": "MR", - "expanded": "Mauritania" - }, - { - "value": "IM", - "expanded": "Isle of Man" - }, - { - "value": "UG", - "expanded": "Uganda" - }, - { - "value": "TZ", - "expanded": "Tanzania, United Republic of" - }, - { - "value": "MY", - "expanded": "Malaysia" - }, - { - "value": "MX", - "expanded": "Mexico" - }, - { - "value": "IL", - "expanded": "Israel" - }, - { - "value": "FR", - "expanded": "France" - }, - { - "value": "IO", - "expanded": "British Virgin Islands" - }, - { - "value": "SH", - "expanded": "Saint Helena" - }, - { - "value": "FI", - "expanded": "Finland" - }, - { - "value": "FJ", - "expanded": "Fiji" - }, - { - "value": "FK", - "expanded": "Faeroe Islands" - }, - { - "value": "FM", - "expanded": "Micronesia (Federated States of)" - }, - { - "value": "FO", - "expanded": "Falkland Islands (Malvinas)" - }, - { - "value": "NI", - "expanded": "Nicaragua" - }, - { - "value": "NL", - "expanded": "Netherlands" - }, - { - "value": "NO", - "expanded": "Norway" - }, - { - "value": "NA", - "expanded": "Namibia" - }, - { - "value": "VU", - "expanded": "Vanuatu" - }, - { - "value": "NC", - "expanded": "New Caledonia" - }, - { - "value": "NE", - "expanded": "Niger" - }, - { - "value": "NF", - "expanded": "Norfolk Island" - }, - { - "value": "NG", - "expanded": "Nigeria" - }, - { - "value": "NZ", - "expanded": "New Zealand" - }, - { - "value": "NP", - "expanded": "Nepal" - }, - { - "value": "NR", - "expanded": "Nauru" - }, - { - "value": "NU", - "expanded": "Niue" - }, - { - "value": "CK", - "expanded": "Cook Islands" - }, - { - "value": "CI", - "expanded": "Cote d'Ivoire" - }, - { - "value": "CH", - "expanded": "Switzerland" - }, - { - "value": "CO", - "expanded": "Colombia" - }, - { - "value": "CN", - "expanded": "China" - }, - { - "value": "CM", - "expanded": "Cameroon" - }, - { - "value": "CL", - "expanded": "Chile" - }, - { - "value": "CC", - "expanded": "Cocos (Keeling) Islands" - }, - { - "value": "CA", - "expanded": "Canada" - }, - { - "value": "CG", - "expanded": "Congo" - }, - { - "value": "CF", - "expanded": "Central African Republic" - }, - { - "value": "CD", - "expanded": "Congo, Democratic Republic of the" - }, - { - "value": "CZ", - "expanded": "Czech Republic" - }, - { - "value": "CY", - "expanded": "Cyprus" - }, - { - "value": "CX", - "expanded": "Christmas Island" - }, - { - "value": "CR", - "expanded": "Costa Rica" - }, - { - "value": "CW", - "expanded": "Curacao" - }, - { - "value": "CV", - "expanded": "Cape Verde" - }, - { - "value": "CU", - "expanded": "Cuba" - }, - { - "value": "SZ", - "expanded": "Swaziland" - }, - { - "value": "SY", - "expanded": "Syrian Arab Republic" - }, - { - "value": "SX", - "expanded": "Sint Maarten (Dutch part)" - }, - { - "value": "KG", - "expanded": "Kyrgyzstan" - }, - { - "value": "KE", - "expanded": "Kenya" - }, - { - "value": "SS", - "expanded": "South Sudan" - }, - { - "value": "SR", - "expanded": "Suriname" - }, - { - "value": "KI", - "expanded": "Kiribati" - }, - { - "value": "KH", - "expanded": "Cambodia" - }, - { - "value": "KN", - "expanded": "Saint Kitts and Nevis" - }, - { - "value": "KM", - "expanded": "Comoros" - }, - { - "value": "ST", - "expanded": "Sao Tome and Principe" - }, - { - "value": "SK", - "expanded": "Slovakia" - }, - { - "value": "KR", - "expanded": "Korea, Republic of" - }, - { - "value": "SI", - "expanded": "Slovenia" - }, - { - "value": "KP", - "expanded": "Korea, Democratic People's Republic of" - }, - { - "value": "KW", - "expanded": "Kuwait" - }, - { - "value": "SN", - "expanded": "Senegal" - }, - { - "value": "SM", - "expanded": "San Marino" - }, - { - "value": "SL", - "expanded": "Sierra Leone" - }, - { - "value": "SC", - "expanded": "Seychelles" - }, - { - "value": "KZ", - "expanded": "Kazakhstan" - }, - { - "value": "KY", - "expanded": "Cayman Islands" - }, - { - "value": "SG", - "expanded": "Singapore" - }, - { - "value": "SE", - "expanded": "Sweden" - }, - { - "value": "SD", - "expanded": "Sudan" - }, - { - "value": "DO", - "expanded": "Dominican Republic" - }, - { - "value": "DM", - "expanded": "Dominica" - }, - { - "value": "DJ", - "expanded": "Djibouti" - }, - { - "value": "DK", - "expanded": "Denmark" - }, - { - "value": "VG", - "expanded": "British Virgin Islands" - }, - { - "value": "DE", - "expanded": "Germany" - }, - { - "value": "YE", - "expanded": "Yemen" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "DZ", - "expanded": "Algeria" - }, - { - "value": "US", - "expanded": "United States of America" - }, - { - "value": "UY", - "expanded": "Uruguay" - }, - { - "value": "YT", - "expanded": "Mayotte" - }, - { - "value": "UM", - "expanded": "United States Minor Outlying Islands" - }, - { - "value": "LB", - "expanded": "Lebanon" - }, - { - "value": "LC", - "expanded": "Saint Lucia" - }, - { - "value": "LA", - "expanded": "Lao People's Democratic Republic" - }, - { - "value": "TV", - "expanded": "Tuvalu" - }, - { - "value": "TW", - "expanded": "Taiwan, Province of China" - }, - { - "value": "TT", - "expanded": "Trinidad and Tobago" - }, - { - "value": "TR", - "expanded": "Turkey" - }, - { - "value": "LK", - "expanded": "Sri Lanka" - }, - { - "value": "LI", - "expanded": "Liechtenstein" - }, - { - "value": "LV", - "expanded": "Latvia" - }, - { - "value": "TO", - "expanded": "Tonga" - }, - { - "value": "LT", - "expanded": "Lithuania" - }, - { - "value": "LU", - "expanded": "Luxembourg" - }, - { - "value": "LR", - "expanded": "Liberia" - }, - { - "value": "LS", - "expanded": "Lesotho" - }, - { - "value": "TH", - "expanded": "Thailand" - }, - { - "value": "TF", - "expanded": "French Southern Territories" - }, - { - "value": "TG", - "expanded": "Togo" - }, - { - "value": "TD", - "expanded": "Chad" - }, - { - "value": "TC", - "expanded": "Turks and Caicos Islands" - }, - { - "value": "LY", - "expanded": "Libya" - }, - { - "value": "VA", - "expanded": "Holy See" - }, - { - "value": "VC", - "expanded": "Saint Vincent and the Grenadines" - }, - { - "value": "AE", - "expanded": "United Arab Emirates" - }, - { - "value": "AD", - "expanded": "Andorra" - }, - { - "value": "AG", - "expanded": "Antigua and Barbuda" - }, - { - "value": "AF", - "expanded": "Afghanistan" - }, - { - "value": "AI", - "expanded": "Anguilla" - }, - { - "value": "VI", - "expanded": "United States Virgin Islands" - }, - { - "value": "IS", - "expanded": "Iceland" - }, - { - "value": "IR", - "expanded": "Iran (Islamic Republic of)" - }, - { - "value": "AM", - "expanded": "Armenia" - }, - { - "value": "AL", - "expanded": "Albania" - }, - { - "value": "AO", - "expanded": "Angola" - }, - { - "value": "AQ", - "expanded": "Antarctica" - }, - { - "value": "AS", - "expanded": "American Samoa" - }, - { - "value": "AR", - "expanded": "Argentina" - }, - { - "value": "AU", - "expanded": "Australia" - }, - { - "value": "AT", - "expanded": "Austria" - }, - { - "value": "AW", - "expanded": "Aruba" - }, - { - "value": "IN", - "expanded": "India" - }, - { - "value": "AX", - "expanded": "Aland Islands" - }, - { - "value": "AZ", - "expanded": "Azerbaijan" - }, - { - "value": "IE", - "expanded": "Ireland" - }, - { - "value": "ID", - "expanded": "Indonesia" - }, - { - "value": "UA", - "expanded": "Ukraine" - }, - { - "value": "QA", - "expanded": "Qatar" - }, - { - "value": "MZ", - "expanded": "Mozambique" - } - ] - }, - { - "predicate": "impact:overall_rating", - "entry": [ - { - "value": "Insignificant", - "expanded": "Insignificant: Impact absorbed by normal activities" - }, - { - "value": "Catastrophic", - "expanded": "Catastrophic: A business-ending event (don't choose this if the victim will continue operations)" - }, - { - "value": "Distracting", - "expanded": "Distracting: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties" - }, - { - "value": "Damaging", - "expanded": "Damaging: Real and serious effect on the \"bottom line\" and/or long-term ability to generate revenue" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Painful", - "expanded": "Painful: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties" - } - ] - }, - { - "predicate": "actor:motive", - "entry": [ - { - "value": "Grudge", - "expanded": "Grudge or personal offense" - }, - { - "value": "Financial", - "expanded": "Financial or personal gain" - }, - { - "value": "NA", - "expanded": "Not Applicable (unintentional action)" - }, - { - "value": "Ideology", - "expanded": "Ideology or protest" - }, - { - "value": "Convenience", - "expanded": "Convenience of expediency" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Fun", - "expanded": "Fun, curiosity, or pride" - }, - { - "value": "Fear", - "expanded": "Fear or duress" - }, - { - "value": "Espionage", - "expanded": "Espionage or competitive advantage" - }, - { - "value": "Secondary", - "expanded": "Aid in a different attack" - } - ] - }, - { - "predicate": "asset:management", - "entry": [ - { - "value": "NA", - "expanded": "Not applicable" - }, - { - "value": "Internal", - "expanded": "Internally managed" - }, - { - "value": "External", - "expanded": "Externally managed" - }, - { - "value": "Unknown", - "expanded": "Unknown" - } - ] - }, - { - "predicate": "asset:variety", - "entry": [ - { - "value": "M - Flash drive", - "expanded": "Media - Flash drive or card" - }, - { - "value": "S - Print", - "expanded": "Server - Print" - }, - { - "value": "P - Guard", - "expanded": "People - Guard" - }, - { - "value": "S - Database", - "expanded": "Server - Database" - }, - { - "value": "N - PBX", - "expanded": "Network - Private branch exchange (PBX)" - }, - { - "value": "M - Other", - "expanded": "Media - Other/Unknown" - }, - { - "value": "S - Other", - "expanded": "Server - Other/Unknown" - }, - { - "value": "P - System admin", - "expanded": "People - Administrator" - }, - { - "value": "S - POS controller", - "expanded": "Server - POS controller" - }, - { - "value": "T - Other", - "expanded": "Public Terminal - Other/Unknown" - }, - { - "value": "N - Camera", - "expanded": "Network - Camera or surveillance system" - }, - { - "value": "S - Unknown", - "expanded": "Server - Unknown" - }, - { - "value": "S - DHCP", - "expanded": "Server - DHCP" - }, - { - "value": "U - POS terminal", - "expanded": "User Device - POS terminal" - }, - { - "value": "N - LAN", - "expanded": "Network - Wired LAN" - }, - { - "value": "P - Manager", - "expanded": "People - Manager" - }, - { - "value": "M - Payment card", - "expanded": "Media - Payment card (e.g., magstripe, EMV)" - }, - { - "value": "N - Public WAN", - "expanded": "Network - Public WAN" - }, - { - "value": "P - Former employee", - "expanded": "People - Former employee" - }, - { - "value": "S - Authentication", - "expanded": "Server - Authentication" - }, - { - "value": "U - Mobile phone", - "expanded": "User Device - Mobile phone or smartphone" - }, - { - "value": "N - Router or switch", - "expanded": "Network - Router or switch" - }, - { - "value": "T - Kiosk", - "expanded": "Public Terminal - Self-service kiosk" - }, - { - "value": "N - HSM", - "expanded": "Network - Hardware security module (HSM)" - }, - { - "value": "U - Peripheral", - "expanded": "User Device - Peripheral (e.g., printer, copier, fax)" - }, - { - "value": "S - Code repository", - "expanded": "Server - Code repository" - }, - { - "value": "S - SCADA", - "expanded": "Server - SCADA system" - }, - { - "value": "P - End-user", - "expanded": "People - End-user" - }, - { - "value": "N - SAN", - "expanded": "Network - Storage area network (SAN)" - }, - { - "value": "T - ATM", - "expanded": "Public Terminal - Automated Teller Machine (ATM)" - }, - { - "value": "N - RTU", - "expanded": "Network - Remote terminal unit (RTU)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "M - Smart card", - "expanded": "Media - Identity smart card" - }, - { - "value": "N - IDS", - "expanded": "Network - IDS or IPs" - }, - { - "value": "N - PLC", - "expanded": "Network - Programmable logic controller (PLC)" - }, - { - "value": "N - Other", - "expanded": "Network - Other/Unknown" - }, - { - "value": "P - Cashier", - "expanded": "People - Cashier" - }, - { - "value": "P - Executive", - "expanded": "People - Executive" - }, - { - "value": "U - Desktop", - "expanded": "User Device - Desktop or workstation" - }, - { - "value": "U - Tablet", - "expanded": "User Device - Tablet" - }, - { - "value": "N - Firewall", - "expanded": "Network - Firewall" - }, - { - "value": "P - Customer", - "expanded": "People - Customer" - }, - { - "value": "S - Mainframe", - "expanded": "Server - Mainframe" - }, - { - "value": "S - Directory", - "expanded": "Server - Directory (LDAP, AD)" - }, - { - "value": "U - Auth token", - "expanded": "User Device - Authentication token or device" - }, - { - "value": "U - Media", - "expanded": "User Device - Media player or recorder" - }, - { - "value": "T - Gas terminal", - "expanded": "Public Terminal - Gas \"pay-at-the-pump\" terminal" - }, - { - "value": "T - PED pad", - "expanded": "Public Terminal - Detached PIN pad or card reader" - }, - { - "value": "M - Disk drive", - "expanded": "Media - Hard disk drive" - }, - { - "value": "S - VM host", - "expanded": "Server - Virtual Host" - }, - { - "value": "P - Auditor", - "expanded": "People - Auditor" - }, - { - "value": "U - VoIP phone", - "expanded": "User Device - VoIP phone" - }, - { - "value": "N - Broadband", - "expanded": "Network - Mobile broadband network" - }, - { - "value": "U - Other", - "expanded": "User Device - Other/Unknown" - }, - { - "value": "U - Telephone", - "expanded": "User Device - Telephone" - }, - { - "value": "P - Call center", - "expanded": "People - Call center" - }, - { - "value": "N - Private WAN", - "expanded": "Network - Private WAN" - }, - { - "value": "S - DNS", - "expanded": "Server - DNS" - }, - { - "value": "P - Helpdesk", - "expanded": "People - Helpdesk" - }, - { - "value": "N - Telephone", - "expanded": "Network - Telephone" - }, - { - "value": "U - Laptop", - "expanded": "User Device - Laptop" - }, - { - "value": "S - Log", - "expanded": "Server - Log or event management" - }, - { - "value": "P - Finance", - "expanded": "People - Finance" - }, - { - "value": "P - Human resources", - "expanded": "People - Human resources" - }, - { - "value": "N - VoIP adapter", - "expanded": "Network - VoIP adapter" - }, - { - "value": "S - Backup", - "expanded": "Server - Backup" - }, - { - "value": "P - Partner", - "expanded": "People - Partner" - }, - { - "value": "P - Maintenance", - "expanded": "People - Maintenance" - }, - { - "value": "S - Payment switch", - "expanded": "Server - Payment switch or gateway" - }, - { - "value": "S - DCS", - "expanded": "Server - Distributed control system (DCS)" - }, - { - "value": "P - Other", - "expanded": "People - Other/Unknown" - }, - { - "value": "S - Proxy", - "expanded": "Server - Proxy" - }, - { - "value": "S - Mail", - "expanded": "Server - Mail" - }, - { - "value": "M - Tapes", - "expanded": "Media - Backup tapes" - }, - { - "value": "S - Remote access", - "expanded": "Server - Remote access" - }, - { - "value": "N - Access reader", - "expanded": "Network - Access control reader (e.g., badge, biometric)" - }, - { - "value": "S - File", - "expanded": "Server - File" - }, - { - "value": "S - Web application", - "expanded": "Server - Web application" - }, - { - "value": "M - Documents", - "expanded": "Media - Documents" - }, - { - "value": "N - WLAN", - "expanded": "Network - Wireless LAN" - }, - { - "value": "P - Developer", - "expanded": "People - Developer" - }, - { - "value": "M - Disk media", - "expanded": "Media - Disk media (e.g., CDs, DVDs)" - } - ] - }, - { - "predicate": "asset:accessibility", - "entry": [ - { - "value": "NA", - "expanded": "Not applicable" - }, - { - "value": "Internal", - "expanded": "Internally accessible" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "External", - "expanded": "Publicly accessible" - }, - { - "value": "Isolated", - "expanded": "Internally isolated or restricted environment" - } - ] - }, - { - "predicate": "asset:governance", - "entry": [ - { - "value": "3rd party hosted", - "expanded": "Hosted by 3rd party" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "3rd party managed", - "expanded": "Managed by 3rd party" - }, - { - "value": "3rd party owned", - "expanded": "Owned by 3rd party" - }, - { - "value": "Personally owned", - "expanded": "Personally owned asset" - }, - { - "value": "Internally isolated", - "expanded": "Isolated internal asset" - } - ] - }, - { - "predicate": "asset:hosting", - "entry": [ - { - "value": "External shared", - "expanded": "Externally hosted in a shared envirnoment" - }, - { - "value": "External dedicated", - "expanded": "Externally hosted in a dedicated envirnoment" - }, - { - "value": "NA", - "expanded": "Not applicable" - }, - { - "value": "Internal", - "expanded": "Internally hosted" - }, - { - "value": "External", - "expanded": "Externally hosted (unsure if dedicated or shared)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - } - ] - }, - { - "predicate": "asset:ownership", - "entry": [ - { - "value": "Customer", - "expanded": "Customer owned" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Victim", - "expanded": "Victim owned" - }, - { - "value": "NA", - "expanded": "Not applicable" - }, - { - "value": "Employee", - "expanded": "Employee owned" - }, - { - "value": "Partner", - "expanded": "Partner owned" - } - ] - }, - { - "predicate": "asset:cloud", - "entry": [ - { - "value": "Hosting error", - "expanded": "Misconfiguration or error by hosting provider" - }, - { - "value": "User breakout", - "expanded": "Elevation of privilege by another customer in shared environment" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Hosting governance", - "expanded": "Lack of security process or procedure by hosting provider" - }, - { - "value": "Customer attack", - "expanded": "Penetration of another web site on shared device" - }, - { - "value": "Hypervisor", - "expanded": "Hypervisor break-out attack" - }, - { - "value": "Partner application", - "expanded": "Application vulnerability in partner-developed application" - } - ] - }, - { - "predicate": "victim:employee_count", - "entry": [ - { - "value": "1001 to 10000", - "expanded": "1,001 to 10,000 employees" - }, - { - "value": "Over 100000", - "expanded": "Over 100,0001 employees" - }, - { - "value": "Large", - "expanded": "Large organizations (over 1,000 employees)" - }, - { - "value": "Unknown", - "expanded": "Unknown number of employees" - }, - { - "value": "50001 to 100000", - "expanded": "50,001 to 100,000 employees" - }, - { - "value": "101 to 1000", - "expanded": "101 to 1,000 employees" - }, - { - "value": "25001 to 50000", - "expanded": "25,001 to 50,000 employees" - }, - { - "value": "10001 to 25000", - "expanded": "10,001 to 25,000 employees" - }, - { - "value": "Small", - "expanded": "Small organizations (1,000 employees or less)" - }, - { - "value": "1 to 10", - "expanded": "1 to 10 employees" - }, - { - "value": "11 to 100", - "expanded": "11 to 100 employees" - } - ] - }, - { - "predicate": "timeline:unit", - "entry": [ - { - "value": "Months", - "expanded": "Months" - }, - { - "value": "Seconds", - "expanded": "Seconds" - }, - { - "value": "NA", - "expanded": "NA" - }, - { - "value": "Never", - "expanded": "Never" - }, - { - "value": "Days", - "expanded": "Days" - }, - { - "value": "Years", - "expanded": "Years" - }, - { - "value": "Hours", - "expanded": "Hours" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Weeks", - "expanded": "Weeks" - }, - { - "value": "Minutes", - "expanded": "Minutes" - } - ] - }, - { - "predicate": "impact:loss:rating", - "entry": [ - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Major", - "expanded": "Major" - }, - { - "value": "Moderate", - "expanded": "Moderate" - }, - { - "value": "None", - "expanded": "None" - }, - { - "value": "Minor", - "expanded": "Minor" - } - ] - }, - { - "predicate": "impact:loss:variety", - "entry": [ - { - "value": "Legal and regulatory", - "expanded": "Legal and regulatory costs" - }, - { - "value": "Asset and fraud", - "expanded": "Asset and fraud-related losses" - }, - { - "value": "Business disruption", - "expanded": "Business disruption" - }, - { - "value": "Response and recovery", - "expanded": "Response and recovery costs" - }, - { - "value": "Competitive advantage", - "expanded": "Loss of competitive advantage" - }, - { - "value": "Operating costs", - "expanded": "Increased operating costs" - }, - { - "value": "Brand damage", - "expanded": "Brand and market damage" - } - ] - }, - { - "predicate": "attribute:integrity:variety", - "entry": [ - { - "value": "Misrepresentation", - "expanded": "Misrepresentation" - }, - { - "value": "Modify data", - "expanded": "Modified stored data or content" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Created account", - "expanded": "Created new user account" - }, - { - "value": "Defacement", - "expanded": "Deface content" - }, - { - "value": "Log tampering", - "expanded": "Log tampering or modification" - }, - { - "value": "Modify privileges", - "expanded": "Modified privileges or permissions" - }, - { - "value": "Software installation", - "expanded": "Software installation or code modification" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Fraudulent transaction", - "expanded": "Initiate fraudulent transaction" - }, - { - "value": "Alter behavior", - "expanded": "Influence or alter human behavior" - }, - { - "value": "Hardware tampering", - "expanded": "Hardware tampering or physical alteration" - }, - { - "value": "Modify configuration", - "expanded": "Modified configuration or services" - }, - { - "value": "Repurpose", - "expanded": "Repurposed asset for unauthorized function" - } - ] - }, - { - "predicate": "attribute:availability:variety", - "entry": [ - { - "value": "Acceleration", - "expanded": "Acceleration" - }, - { - "value": "Interruption", - "expanded": "Interruption" - }, - { - "value": "Loss", - "expanded": "Loss" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Degradation", - "expanded": "Performance degradation" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Obscuration", - "expanded": "Conversion or obscuration" - }, - { - "value": "Destruction", - "expanded": "Destruction" - } - ] - }, - { - "predicate": "attribute:confidentiality:data_victim", - "entry": [ - { - "value": "Customer", - "expanded": "Customer" - }, - { - "value": "Patient", - "expanded": "Patient" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Student", - "expanded": "Student" - }, - { - "value": "Employee", - "expanded": "Employee" - }, - { - "value": "Partner", - "expanded": "Partner" - } - ] - }, - { - "predicate": "attribute:confidentiality:state", - "entry": [ - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Transmitted encrypted", - "expanded": "Transmitted encrypted" - }, - { - "value": "Transmitted unencrypted", - "expanded": "Transmitted unencrypted" - }, - { - "value": "Stored", - "expanded": "Stored" - }, - { - "value": "Transmitted", - "expanded": "Transmitted" - }, - { - "value": "Processed", - "expanded": "Processed" - }, - { - "value": "Stored encrypted", - "expanded": "Stored encrypted" - }, - { - "value": "Stored unencrypted", - "expanded": "Stored unencrypted" - } - ] - }, - { - "predicate": "attribute:confidentiality:data_disclosure", - "entry": [ - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Yes", - "expanded": "Yes (confirmed)" - }, - { - "value": "Potentially", - "expanded": "Potentially (at risk)" - }, - { - "value": "No", - "expanded": "No" - } - ] - }, - { - "predicate": "actor:internal:job_change", - "entry": [ - { - "value": "Lateral move", - "expanded": "Lateral move" - }, - { - "value": "Job eval", - "expanded": "Recent poor job evaluation" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Personal issues", - "expanded": "Personal issues" - }, - { - "value": "Let go", - "expanded": "Fired, laid off, or let go" - }, - { - "value": "Reprimanded", - "expanded": "Recently reprimanded" - }, - { - "value": "Hired", - "expanded": "Recently hired" - }, - { - "value": "Passed over", - "expanded": "Recently passed over for promotion" - }, - { - "value": "Demoted", - "expanded": "Recently demoted or hours reduced" - }, - { - "value": "Promoted", - "expanded": "Recently promoted" - }, - { - "value": "Resigned", - "expanded": "Recently resigned" - }, - { - "value": "Other", - "expanded": "Other" - } - ] - }, - { - "predicate": "actor:internal:variety", - "entry": [ - { - "value": "End-user", - "expanded": "End-user or regular employee" - }, - { - "value": "Human resources", - "expanded": "Human resources staff" - }, - { - "value": "Finance", - "expanded": "Finance or accounting staff" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Helpdesk", - "expanded": "Helpdesk staff" - }, - { - "value": "Executive", - "expanded": "Executive or upper management" - }, - { - "value": "Cashier", - "expanded": "Cashier, teller, or waiter" - }, - { - "value": "Manager", - "expanded": "Manager or supervisor" - }, - { - "value": "Guard", - "expanded": "Security guard" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Auditor", - "expanded": "Auditor" - }, - { - "value": "Maintenance", - "expanded": "Maintenance or janitorial staff" - }, - { - "value": "Call center", - "expanded": "Call center staff" - }, - { - "value": "System admin", - "expanded": "System or network administrator" - }, - { - "value": "Developer", - "expanded": "Software developer" - } - ] - }, - { - "predicate": "actor:external:variety", - "entry": [ - { - "value": "Customer", - "expanded": "Customer (B2C)" - }, - { - "value": "Organized crime", - "expanded": "Organized or professional criminal group" - }, - { - "value": "Acquaintance", - "expanded": "Relative or acquaintance of employee" - }, - { - "value": "Competitor", - "expanded": "Competitor" - }, - { - "value": "Unaffiliated", - "expanded": "Unaffiliated person(s)" - }, - { - "value": "Force majeure", - "expanded": "Force majeure (nature and chance)" - }, - { - "value": "Former employee", - "expanded": "Former employee (no longer had access)" - }, - { - "value": "Nation-state", - "expanded": "Nation-state" - }, - { - "value": "Activist", - "expanded": "Activist group" - }, - { - "value": "Terrorist", - "expanded": "Terrorist group" - }, - { - "value": "Auditor", - "expanded": "Auditor" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "State-affiliated", - "expanded": "State-sponsored or affiliated group" - }, - { - "value": "Other", - "expanded": "Other" - } - ] - }, - { - "predicate": "action:malware:vector", - "entry": [ - { - "value": "Remote injection", - "expanded": "Remotely injected by agent (i.e. via SQLi)" - }, - { - "value": "Software update", - "expanded": "Included in automated software update" - }, - { - "value": "Instant messaging", - "expanded": "Instant Messaging" - }, - { - "value": "Email attachment", - "expanded": "Email via user-executed attachment" - }, - { - "value": "Direct install", - "expanded": "Directly installed or inserted by threat agent (after system access)" - }, - { - "value": "Download by malware", - "expanded": "Downloaded and installed by local malware" - }, - { - "value": "Removable media", - "expanded": "Removable storage media or devices" - }, - { - "value": "Web drive-by", - "expanded": "Web via auto-executed or \"drive-by\" infection" - }, - { - "value": "Email link", - "expanded": "Email via embedded link" - }, - { - "value": "Network propagation", - "expanded": "Network propagation" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Email autoexecute", - "expanded": "Email via automatic execution" - }, - { - "value": "Web download", - "expanded": "Web via user-executed or downloaded content" - }, - { - "value": "Other", - "expanded": "Other" - } - ] - }, - { - "predicate": "action:malware:variety", - "entry": [ - { - "value": "Spam", - "expanded": "Send spam" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Packet sniffer", - "expanded": "Packet sniffer (capture data from network)" - }, - { - "value": "Backdoor", - "expanded": "Backdoor (enable remote access)" - }, - { - "value": "Exploit vuln", - "expanded": "Exploit vulnerability in code (vs misconfig or weakness)" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Password dumper", - "expanded": "Password dumper (extract credential hashes)" - }, - { - "value": "Scan network", - "expanded": "Scan or footprint network" - }, - { - "value": "Downloader", - "expanded": "Downloader (pull updates or other malware) " - }, - { - "value": "Adminware", - "expanded": "System or network utilities (e.g., PsTools, Netcat)" - }, - { - "value": "Click fraud", - "expanded": "Click fraud or Bitcoin mining" - }, - { - "value": "Adware", - "expanded": "Adware" - }, - { - "value": "C2", - "expanded": "Command and control (C2)" - }, - { - "value": "Worm", - "expanded": "Worm (propagate to other systems or devices)" - }, - { - "value": "Spyware/Keylogger", - "expanded": "Spyware, keylogger or form-grabber (capture user input or activity)" - }, - { - "value": "Brute force", - "expanded": "Brute force attack" - }, - { - "value": "Capture app data", - "expanded": "Capture data from application or system process" - }, - { - "value": "Ram scraper", - "expanded": "Ram scraper or memory parser (capture data from volatile memory)" - }, - { - "value": "Disable controls", - "expanded": "Disable or interfere with security controls" - }, - { - "value": "Capture stored data", - "expanded": "Capture data stored on system disk" - }, - { - "value": "Ransomware", - "expanded": "Ransomware (encrypt or seize stored data)" - }, - { - "value": "Export data", - "expanded": "Export data to another site or system" - }, - { - "value": "Client-side attack", - "expanded": "Client-side or browser attack (e.g., redirection, XSS, MitB)" - }, - { - "value": "SQL injection", - "expanded": "SQL injection attack" - }, - { - "value": "Rootkit", - "expanded": "Rootkit (maintain local privileges and stealth)" - }, - { - "value": "Destroy data", - "expanded": "Destroy or corrupt stored data" - }, - { - "value": "DoS", - "expanded": "DoS attack" - } - ] - }, - { - "predicate": "action:social:vector", - "entry": [ - { - "value": "In-person", - "expanded": "In-person" - }, - { - "value": "Social media", - "expanded": "Social media or networking" - }, - { - "value": "Documents", - "expanded": "Documents" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "SMS", - "expanded": "SMS or texting" - }, - { - "value": "Phone", - "expanded": "Phone" - }, - { - "value": "Website", - "expanded": "Website" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "IM", - "expanded": "Instant messaging" - }, - { - "value": "Removable media", - "expanded": "Removable storage media" - }, - { - "value": "Email", - "expanded": "Email" - }, - { - "value": "Software", - "expanded": "Software" - } - ] - }, - { - "predicate": "action:social:target", - "entry": [ - { - "value": "Customer", - "expanded": "Customer (B2C)" - }, - { - "value": "End-user", - "expanded": "End-user or regular employee" - }, - { - "value": "Human resources", - "expanded": "Human resources staff" - }, - { - "value": "Finance", - "expanded": "Finance or accounting staff" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Helpdesk", - "expanded": "Helpdesk staff" - }, - { - "value": "Executive", - "expanded": "Executive or upper management" - }, - { - "value": "Cashier", - "expanded": "Cashier, teller or waiter" - }, - { - "value": "Manager", - "expanded": "Manager or supervisor" - }, - { - "value": "Former employee", - "expanded": "Former employee" - }, - { - "value": "Guard", - "expanded": "Security guard" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Auditor", - "expanded": "Auditor" - }, - { - "value": "Maintenance", - "expanded": "Maintenance or janitorial staff" - }, - { - "value": "Call center", - "expanded": "Call center staff" - }, - { - "value": "Partner", - "expanded": "Partner (B2B)" - }, - { - "value": "System admin", - "expanded": "System or network administrator" - }, - { - "value": "Developer", - "expanded": "Software developer" - } - ] - }, - { - "predicate": "action:social:variety", - "entry": [ - { - "value": "Scam", - "expanded": "Online scam or hoax (e.g., scareware, 419 scam, auction fraud)" - }, - { - "value": "Phishing", - "expanded": "Phishing (or any type of *ishing)" - }, - { - "value": "Elicitation", - "expanded": "Elicitation (subtle extraction of info through conversation)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Spam", - "expanded": "Spam (unsolicited or undesired email and advertisements)" - }, - { - "value": "Influence", - "expanded": "Influence tactics (Leveraging authority or obligation, framing, etc)" - }, - { - "value": "Propaganda", - "expanded": "Propaganda or disinformation" - }, - { - "value": "Forgery", - "expanded": "Forgery or counterfeiting (fake hardware, software, documents, etc)" - }, - { - "value": "Bribery", - "expanded": "Bribery or solicitation" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Pretexting", - "expanded": "Pretexting (dialogue leveraging invented scenario)" - }, - { - "value": "Extortion", - "expanded": "Extortion or blackmail" - }, - { - "value": "Baiting", - "expanded": "Baiting (planting infected media)" - } - ] - }, - { - "predicate": "action:environmental:variety", - "entry": [ - { - "value": "Hazmat", - "expanded": "Hazardous material" - }, - { - "value": "Temperature", - "expanded": "Extreme temperature" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Hurricane", - "expanded": "Hurricane" - }, - { - "value": "Ice", - "expanded": "Ice and snow" - }, - { - "value": "Meteorite", - "expanded": "Meteorite" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Pathogen", - "expanded": "Pathogen" - }, - { - "value": "Landslide", - "expanded": "Landslide" - }, - { - "value": "Tornado", - "expanded": "Tornado" - }, - { - "value": "Leak", - "expanded": "Water leak" - }, - { - "value": "Earthquake", - "expanded": "Earthquake" - }, - { - "value": "Particulates", - "expanded": "Particulate matter (e.g., dust, smoke)" - }, - { - "value": "Power failure", - "expanded": "Power failure or fluctuation" - }, - { - "value": "EMI", - "expanded": "Electromagnetic interference (EMI)" - }, - { - "value": "Humidity", - "expanded": "Humidity" - }, - { - "value": "Tsunami", - "expanded": "Tsunami" - }, - { - "value": "ESD", - "expanded": "Electrostatic discharge (ESD)" - }, - { - "value": "Deterioration", - "expanded": "Deterioration and degradation" - }, - { - "value": "Volcano", - "expanded": "Volcanic eruption" - }, - { - "value": "Lightning", - "expanded": "Lightning" - }, - { - "value": "Wind", - "expanded": "Wind" - }, - { - "value": "Flood", - "expanded": "Flood" - }, - { - "value": "Vermin", - "expanded": "Vermin" - }, - { - "value": "Fire", - "expanded": "Fire" - } - ] - }, - { - "predicate": "action:error:vector", - "entry": [ - { - "value": "Random error", - "expanded": "Random error (no reason, no fault)" - }, - { - "value": "Carelessness", - "expanded": "Carelessness" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Inadequate processes", - "expanded": "Inadequate or insufficient processes" - }, - { - "value": "Inadequate technology", - "expanded": "Inadequate or insufficient technology resources" - }, - { - "value": "Inadequate personnel", - "expanded": "Inadequate or insufficient personnel" - } - ] - }, - { - "predicate": "action:error:variety", - "entry": [ - { - "value": "Disposal error", - "expanded": "Disposal error" - }, - { - "value": "Omission", - "expanded": "Omission (something intended, but not done)" - }, - { - "value": "Loss", - "expanded": "Loss or misplacement" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Maintenance error", - "expanded": "Maintenance error" - }, - { - "value": "Misinformation", - "expanded": "Misinformation (unintentionally giving false info)" - }, - { - "value": "Physical accidents", - "expanded": "Physical accidents (e.g., drops, bumps, spills)" - }, - { - "value": "Publishing error", - "expanded": "Publishing error (private info to public doc or site)" - }, - { - "value": "Malfunction", - "expanded": "Technical malfunction or glitch" - }, - { - "value": "Capacity shortage", - "expanded": "Poor capacity planning" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Programming error", - "expanded": "Programming error (flaws or bugs in custom code)" - }, - { - "value": "Data entry error", - "expanded": "Data entry error" - }, - { - "value": "Gaffe", - "expanded": "Gaffe (social or verbal slip)" - }, - { - "value": "Misconfiguration", - "expanded": "Misconfiguration" - }, - { - "value": "Misdelivery", - "expanded": "Misdelivery (send wrong info or to wrong recipient)" - }, - { - "value": "Classification error", - "expanded": "Classification or labeling error" - } - ] - }, - { - "predicate": "action:misuse:vector", - "entry": [ - { - "value": "Physical access", - "expanded": "Physical access within corporate facility" - }, - { - "value": "Remote access", - "expanded": "Remote access connection to corporate network (i.e. VPN)" - }, - { - "value": "LAN access", - "expanded": "Local network access within corporate facility" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Non-corporate", - "expanded": "Non-corporate facilities or networks" - }, - { - "value": "Other", - "expanded": "Other" - } - ] - }, - { - "predicate": "action:misuse:variety", - "entry": [ - { - "value": "Unapproved software", - "expanded": "Use of unapproved software or services" - }, - { - "value": "Illicit content", - "expanded": "Storage or distribution of illicit content" - }, - { - "value": "Unapproved workaround", - "expanded": "Unapproved workaround or shortcut" - }, - { - "value": "Unapproved hardware", - "expanded": "Use of unapproved hardware or devices" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Email misuse", - "expanded": "Inappropriate use of email or IM" - }, - { - "value": "Possession abuse", - "expanded": "Abuse of physical access to asset" - }, - { - "value": "Other", - "expanded": " Other" - }, - { - "value": "Net misuse", - "expanded": "Inappropriate use of network or Web access" - }, - { - "value": "Data mishandling", - "expanded": "Handling of data in an unapproved manner" - }, - { - "value": "Privilege abuse", - "expanded": "Abuse of system access privileges" - }, - { - "value": "Knowledge abuse", - "expanded": "Abuse of private or entrusted knowledge" - } - ] - }, - { - "predicate": "action:hacking:vector", - "entry": [ - { - "value": "Physical access", - "expanded": "Physical access or connection (i.e., at keyboard or via cable) " - }, - { - "value": "Command shell", - "expanded": "Remote shell" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Backdoor or C2", - "expanded": "Backdoor or command and control channel" - }, - { - "value": "Web application", - "expanded": "Web application" - }, - { - "value": "Desktop sharing", - "expanded": "Graphical desktop sharing (RDP, VNC, PCAnywhere, Citrix)" - }, - { - "value": "3rd party desktop", - "expanded": "3rd party online desktop sharing (LogMeIn, Go2Assist)" - }, - { - "value": "Partner", - "expanded": "Partner connection or credential" - }, - { - "value": "VPN", - "expanded": "VPN" - }, - { - "value": "Other", - "expanded": "Other" - } - ] - }, - { - "predicate": "action:hacking:variety", - "entry": [ - { - "value": "XSS", - "expanded": "Cross-site scripting" - }, - { - "value": "HTTP Response Splitting", - "expanded": "HTTP Response Splitting" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Buffer overflow", - "expanded": "Buffer overflow" - }, - { - "value": "Format string attack", - "expanded": "Format string attack" - }, - { - "value": "LDAP injection", - "expanded": "LDAP injection" - }, - { - "value": "SSI injection", - "expanded": "SSI injection" - }, - { - "value": "MitM", - "expanded": "Man-in-the-middle attack" - }, - { - "value": "Path traversal", - "expanded": "Path traversal" - }, - { - "value": "URL redirector abuse", - "expanded": "URL redirector abuse" - }, - { - "value": "Use of backdoor or C2", - "expanded": "Use of Backdoor or C2 channel" - }, - { - "value": "Mail command injection", - "expanded": "Mail command injection" - }, - { - "value": "Virtual machine escape", - "expanded": "Virtual machine escape" - }, - { - "value": "OS commanding", - "expanded": "OS commanding" - }, - { - "value": "Soap array abuse", - "expanded": "Soap array abuse" - }, - { - "value": "Footprinting", - "expanded": "Footprinting and fingerprinting" - }, - { - "value": "Cryptanalysis", - "expanded": "Cryptanalysis" - }, - { - "value": "SQLi", - "expanded": "SQL injection" - }, - { - "value": "XML external entities", - "expanded": "XML external entities" - }, - { - "value": "Abuse of functionality", - "expanded": "Abuse of functionality" - }, - { - "value": "XML injection", - "expanded": "XML injection" - }, - { - "value": "Routing detour", - "expanded": "Routing detour" - }, - { - "value": "HTTP response smuggling", - "expanded": "HTTP response smuggling" - }, - { - "value": "Forced browsing", - "expanded": "Forced browsing or predictable resource location" - }, - { - "value": "Cache poisoning", - "expanded": "Cache poisoning" - }, - { - "value": "Null byte injection", - "expanded": "Null byte injection" - }, - { - "value": "Reverse engineering", - "expanded": "Reverse engineering" - }, - { - "value": "Brute force", - "expanded": "Brute force or password guessing attacks" - }, - { - "value": "Fuzz testing", - "expanded": "Fuzz testing" - }, - { - "value": "Offline cracking", - "expanded": "Offline password or key cracking (e.g., rainbow tables, Hashcat, JtR)" - }, - { - "value": "CSRF", - "expanded": "Cross-site request forgery" - }, - { - "value": "XML entity expansion", - "expanded": "XML entity expansion" - }, - { - "value": "RFI", - "expanded": "Remote file inclusion" - }, - { - "value": "Session fixation", - "expanded": "Session fixation" - }, - { - "value": "Integer overflows", - "expanded": "Integer overflows" - }, - { - "value": "XQuery injection", - "expanded": "XQuery injection" - }, - { - "value": "Pass-the-hash", - "expanded": "Pass-the-hash" - }, - { - "value": "XML attribute blowup", - "expanded": "XML attribute blowup" - }, - { - "value": "Session prediction", - "expanded": "Credential or session prediction" - }, - { - "value": "Use of stolen creds", - "expanded": "Use of stolen authentication credentials" - }, - { - "value": "HTTP request smuggling", - "expanded": "HTTP request smuggling" - }, - { - "value": "XPath injection", - "expanded": "XPath injection" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "DoS", - "expanded": "Denial of service" - }, - { - "value": "Special element injection", - "expanded": "Special element injection" - }, - { - "value": "HTTP request splitting", - "expanded": "HTTP request splitting" - }, - { - "value": "Session replay", - "expanded": "Session replay" - } - ] - }, - { - "predicate": "action:physical:vector", - "entry": [ - { - "value": "Personal vehicle", - "expanded": "Personal vehicle" - }, - { - "value": "Visitor privileges", - "expanded": "Given temporary visitor access" - }, - { - "value": "Public facility", - "expanded": "Public facility or area" - }, - { - "value": "Victim grounds", - "expanded": "Victim outdoor grounds" - }, - { - "value": "Uncontrolled location", - "expanded": "The location was uncontrolled (public)" - }, - { - "value": "Partner vehicle", - "expanded": "Partner vehicle (e.g., delivery truck)" - }, - { - "value": "Victim work area", - "expanded": "Victim private or work area (e.g., office space)" - }, - { - "value": "Victim secure area", - "expanded": "Victim high security area (e.g., server room, R&D labs)" - }, - { - "value": "Partner facility", - "expanded": "Partner facility or area" - }, - { - "value": "Personal residence", - "expanded": "Personal residence" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Public vehicle", - "expanded": "Public vehicle (e.g., plane, taxi)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Victim public area", - "expanded": "Victim public or customer area (e.g., lobby, storefront)" - }, - { - "value": "Privileged access", - "expanded": "Held privileged access to location" - } - ] - }, - { - "predicate": "action:physical:variety", - "entry": [ - { - "value": "Skimmer", - "expanded": "Installing card skimming device" - }, - { - "value": "Snooping", - "expanded": "Snooping (sneak about to gain info or access)" - }, - { - "value": "Tampering", - "expanded": "Tampering (alter physical form or function)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Theft", - "expanded": "Theft (taking assets without permission)" - }, - { - "value": "Connection", - "expanded": "Connection" - }, - { - "value": "Surveillance", - "expanded": "Surveillance (monitoring and observation)" - }, - { - "value": "Assault", - "expanded": "Assault (threats or acts of physical violence)" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Wiretapping", - "expanded": "Wiretapping (Physical tap to comms line)" - }, - { - "value": "Bypassed controls", - "expanded": "Bypassed physical barriers or controls" - }, - { - "value": "Disabled controls", - "expanded": "Disabled physical barriers or controls" - }, - { - "value": "Destruction", - "expanded": "Destruction (deliberate damaging or disabling)" - } - ] - }, - { - "predicate": "attribute:confidentiality:data:variety", - "entry": [ - { - "value": "Source code", - "expanded": "Source code" - }, - { - "value": "Personal", - "expanded": "Personal or identifying information (e.g., addr, ID#, credit score)" - }, - { - "value": "Unknown", - "expanded": "Unknown" - }, - { - "value": "Medical", - "expanded": "Medical records" - }, - { - "value": "Classified", - "expanded": "Classified information" - }, - { - "value": "System", - "expanded": "System information (e.g., config info, open services)" - }, - { - "value": "Digital certificate", - "expanded": "Digital certificate" - }, - { - "value": "Secrets", - "expanded": "Trade secrets" - }, - { - "value": "Internal", - "expanded": "Sensitive internal data (e.g., plans, reports, emails)" - }, - { - "value": "Virtual currency", - "expanded": "Virtual currency" - }, - { - "value": "Copyrighted", - "expanded": "Copyrighted material" - }, - { - "value": "Credentials", - "expanded": "Authentication credentials (e.g., pwds, OTPs, biometrics)" - }, - { - "value": "Other", - "expanded": "Other" - }, - { - "value": "Payment", - "expanded": "Payment card data (e.g., PAN, PIN, CVV2, Expiration)" - }, - { - "value": "Bank", - "expanded": "Bank account data" - } - ] - } - ], "predicates": [ - { - "value": "iso_currency_code" - }, { "value": "confidence" }, @@ -4091,28 +16,25 @@ "value": "security_incident" }, { - "value": "country" + "value": "impact:iso_currency_code" }, { "value": "impact:overall_rating" }, - { - "value": "actor:motive" - }, { "value": "asset:management" }, { - "value": "asset:variety" + "value": "asset:country" }, { - "value": "asset:accessibility" + "value": "asset:hosting" }, { "value": "asset:governance" }, { - "value": "asset:hosting" + "value": "asset:accessibility" }, { "value": "asset:ownership" @@ -4121,10 +43,10 @@ "value": "asset:cloud" }, { - "value": "victim:employee_count" + "value": "victim:country" }, { - "value": "timeline:unit" + "value": "victim:employee_count" }, { "value": "impact:loss:rating" @@ -4133,10 +55,49 @@ "value": "impact:loss:variety" }, { - "value": "attribute:integrity:variety" + "value": "timeline:exfiltration:unit" }, { - "value": "attribute:availability:variety" + "value": "timeline:containment:unit" + }, + { + "value": "timeline:compromise:unit" + }, + { + "value": "timeline:discovery:unit" + }, + { + "value": "actor:partner:motive" + }, + { + "value": "actor:partner:country" + }, + { + "value": "actor:internal:motive" + }, + { + "value": "actor:internal:job_change" + }, + { + "value": "actor:internal:variety" + }, + { + "value": "actor:external:motive" + }, + { + "value": "actor:external:country" + }, + { + "value": "actor:external:variety" + }, + { + "value": "asset:assets:variety" + }, + { + "value": "victim:revenue:iso_currency_code" + }, + { + "value": "attribute:integrity:variety" }, { "value": "attribute:confidentiality:data_victim" @@ -4148,20 +109,23 @@ "value": "attribute:confidentiality:data_disclosure" }, { - "value": "actor:internal:job_change" - }, - { - "value": "actor:internal:variety" - }, - { - "value": "actor:external:variety" + "value": "attribute:availability:variety" }, { "value": "action:malware:vector" }, + { + "value": "action:malware:result" + }, { "value": "action:malware:variety" }, + { + "value": "action:unknown:result" + }, + { + "value": "action:social:result" + }, { "value": "action:social:vector" }, @@ -4183,23 +147,17968 @@ { "value": "action:misuse:vector" }, + { + "value": "action:misuse:result" + }, { "value": "action:misuse:variety" }, { "value": "action:hacking:vector" }, + { + "value": "action:hacking:result" + }, { "value": "action:hacking:variety" }, { "value": "action:physical:vector" }, + { + "value": "action:physical:result" + }, { "value": "action:physical:variety" }, { "value": "attribute:confidentiality:data:variety" + }, + { + "value": "attribute:availability:duration:unit" } - ] + ], + "values": [ + { + "entry": [ + { + "expanded": "High confidence", + "value": "High" + } + ], + "predicate": "confidence" + }, + { + "entry": [ + { + "expanded": "No confidence", + "value": "None" + } + ], + "predicate": "confidence" + }, + { + "entry": [ + { + "expanded": "Medium confidence", + "value": "Medium" + } + ], + "predicate": "confidence" + }, + { + "entry": [ + { + "expanded": "Low confidence", + "value": "Low" + } + ], + "predicate": "confidence" + }, + { + "entry": [ + { + "expanded": "Targeted: victim chosen as target then actor determined what weaknesses could be exploited", + "value": "Targeted" + } + ], + "predicate": "targeted" + }, + { + "entry": [ + { + "expanded": "Not applicable", + "value": "NA" + } + ], + "predicate": "targeted" + }, + { + "entry": [ + { + "expanded": "Opportunistic: victim attacked because they exhibited a weakness the actor knew how to exploit", + "value": "Opportunistic" + } + ], + "predicate": "targeted" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "targeted" + }, + { + "entry": [ + { + "expanded": "Internal - financial audit and reconciliation process", + "value": "Int - financial audit" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - Found documents", + "value": "Ext - found documents" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - security audit or scan", + "value": "Ext - audit" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - Notified while investigating another incident", + "value": "Ext - incident response" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - unknown", + "value": "Ext - unknown" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - All network-based security tool detection (including IPS, IDS, firewalls and other network-based security tools)", + "value": "Int - NIDS" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - Emergency response team", + "value": "Ext - emergency response team" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - fraud detection (e.g., CPP)", + "value": "Ext - fraud detection" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - discovered while responding to another (separate) incident", + "value": "Int - incident response" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - reported by customer or partner affected by the incident", + "value": "Ext - customer" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Discovered by person unaffiliated with victim or threat actor", + "value": "Ext - unrelated 3rd party" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Partner - Audit performed by a partner organization", + "value": "Prt - audit" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Any routine maintenance, testing or review of it assets. (Includes inspect of assets, vulnerability scans, etc.)", + "value": "Int - IT review" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - employee discovered evidence of a break in", + "value": "Int - break in discovered" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Discovery method was internal and known but not listed", + "value": "Int - other" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - log review process or SIEM", + "value": "Int - log review" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - unknown", + "value": "Int - unknown" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - Report of suspicious traffic", + "value": "Ext - suspicious traffic" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - host IDS or file integrity monitoring", + "value": "Int - HIDS" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - managed security event monitoring service", + "value": "Ext - monitoring service" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Partner - Notified by antivirus company but not through AV product", + "value": "Prt - antivirus" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Discovery method was external and known but not listed", + "value": "Ext - other" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - physical security system alarm", + "value": "Int - security alarm" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - notified by law enforcement or government agency", + "value": "Ext - law enforcement" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - antivirus alert", + "value": "Int - antivirus" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - Health and welfare monitoring of assets such as utilization, uptime, and SNMP alerts", + "value": "Int - infrastructure monitoring" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Partner - notified while investigating another incident", + "value": "Prt - incident response" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - Data loss prevention software", + "value": "Int - data loss prevention" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - fraud detection mechanism", + "value": "Int - fraud detection" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Partner - Reported by a monitoring service", + "value": "Prt - monitoring service" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Internal - reported by employee who saw something odd", + "value": "Int - reported by employee" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Partner - Unknown", + "value": "Prt - unknown" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Discovery method was partner and known but not listed", + "value": "Prt - other" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "External - disclosed by threat agent (e.g., public brag, private blackmail)", + "value": "Ext - actor disclosure" + } + ], + "predicate": "discovery_method" + }, + { + "entry": [ + { + "expanded": "Simple and cheap", + "value": "Simple and cheap" + } + ], + "predicate": "cost_corrective_action" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "cost_corrective_action" + }, + { + "entry": [ + { + "expanded": "Something in-between", + "value": "Something in-between" + } + ], + "predicate": "cost_corrective_action" + }, + { + "entry": [ + { + "expanded": "Difficult and expensive", + "value": "Difficult and expensive" + } + ], + "predicate": "cost_corrective_action" + }, + { + "entry": [ + { + "expanded": "Suspected", + "value": "Suspected" + } + ], + "predicate": "security_incident" + }, + { + "entry": [ + { + "expanded": "Yes - Confirmed", + "value": "Confirmed" + } + ], + "predicate": "security_incident" + }, + { + "entry": [ + { + "expanded": "Near miss (actions did not compromise asset)", + "value": "Near miss" + } + ], + "predicate": "security_incident" + }, + { + "entry": [ + { + "expanded": "False positive (response triggered, but no incident)", + "value": "False positive" + } + ], + "predicate": "security_incident" + }, + { + "entry": [ + { + "expanded": "DZD - Algerian Dinar", + "value": "DZD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NAD - Namibia Dollar", + "value": "NAD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GHS - Ghana Cedi", + "value": "GHS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "EGP - Egyptian Pound", + "value": "EGP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BGN - Bulgarian Lev", + "value": "BGN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PAB - Balboa", + "value": "PAB" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BOB - Boliviano", + "value": "BOB" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DKK - Danish Krone", + "value": "DKK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BWP - Pula", + "value": "BWP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LBP - Lebanese Pound", + "value": "LBP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TZS - Tanzanian Shilling", + "value": "TZS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VND - Dong", + "value": "VND" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AOA - Kwanza", + "value": "AOA" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KHR - Riel", + "value": "KHR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MYR - Malaysian Ringgit", + "value": "MYR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KYD - Cayman Islands Dollar", + "value": "KYD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LYD - Libyan Dinar", + "value": "LYD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UAH - Hryvnia", + "value": "UAH" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JOD - Jordanian Dinar", + "value": "JOD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AWG - Aruban Florin", + "value": "AWG" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SAR - Saudi Riyal", + "value": "SAR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "EUR - Euro", + "value": "EUR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HKD - Hong Kong Dollar", + "value": "HKD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CHF - Swiss Franc", + "value": "CHF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GIP - Gibraltar Pound", + "value": "GIP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BYR - Belarussian Ruble", + "value": "BYR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ALL - Lek", + "value": "ALL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MRO - Ouguiya", + "value": "MRO" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HRK - Croatian Kuna", + "value": "HRK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DJF - Djibouti Franc", + "value": "DJF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SZL - Lilangeni", + "value": "SZL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "THB - Baht", + "value": "THB" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XAF - CFA Franc BEAC", + "value": "XAF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BND - Brunei Dollar", + "value": "BND" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ISK - Iceland Krona", + "value": "ISK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UYU - Peso Uruguayo", + "value": "UYU" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NIO - Cordoba Oro", + "value": "NIO" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LAK - Kip", + "value": "LAK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SYP - Syrian Pound", + "value": "SYP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MAD - Moroccan Dirham", + "value": "MAD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MZN - Mozambique Metical", + "value": "MZN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PHP - Philippine Peso", + "value": "PHP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZAR - South African Rand", + "value": "ZAR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NPR - Nepalese Rupee", + "value": "NPR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NGN - Naira", + "value": "NGN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZWD - Zimbabwean Dollar A/06", + "value": "ZWD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CRC - Costa Rican Colon", + "value": "CRC" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AED - UAE Dirham", + "value": "AED" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GBP - Pound Sterling", + "value": "GBP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MWK - Kwacha", + "value": "MWK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LKR - Sri Lanka Rupee", + "value": "LKR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PKR - Pakistan Rupee", + "value": "PKR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HUF - Forint", + "value": "HUF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BMD - Bermudian Dollar", + "value": "BMD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LSL - Loti", + "value": "LSL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MNT - Tugrik", + "value": "MNT" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AMD - Armenian Dram", + "value": "AMD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UGX - Uganda Shilling", + "value": "UGX" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "QAR - Qatari Rial", + "value": "QAR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XDR - SDR (Special Drawing Right)", + "value": "XDR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JMD - Jamaican Dollar", + "value": "JMD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GEL - Lari", + "value": "GEL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SHP - Saint Helena Pound", + "value": "SHP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AFN - Afghani", + "value": "AFN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SBD - Solomon Islands Dollar", + "value": "SBD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KPW - North Korean Won", + "value": "KPW" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TRY - Turkish Lira", + "value": "TRY" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BDT - Taka", + "value": "BDT" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "YER - Yemeni Rial", + "value": "YER" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HTG - Gourde", + "value": "HTG" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XOF - CFA Franc BCEAO", + "value": "XOF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MGA - Malagasy Ariary", + "value": "MGA" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ANG - Netherlands Antillean Guilder", + "value": "ANG" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LRD - Liberian Dollar", + "value": "LRD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RWF - Rwanda Franc", + "value": "RWF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NOK - Norwegian Krone", + "value": "NOK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MOP - Pataca", + "value": "MOP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "INR - Indian Rupee", + "value": "INR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MXN - Mexican Peso", + "value": "MXN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CZK - Czech Koruna", + "value": "CZK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TJS - Somoni", + "value": "TJS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TWD - New Taiwan Dollar", + "value": "TWD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BTN - Ngultrum", + "value": "BTN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "COP - Colombian Peso", + "value": "COP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TMT - Turkmenistan New Manat", + "value": "TMT" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MUR - Mauritius Rupee", + "value": "MUR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IDR - Rupiah", + "value": "IDR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HNL - Lempira", + "value": "HNL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XPF - CFP Franc", + "value": "XPF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "FJD - Fiji Dollar", + "value": "FJD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ETB - Ethiopian Birr", + "value": "ETB" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PEN - Nuevo Sol", + "value": "PEN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BZD - Belize Dollar", + "value": "BZD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ILS - New Israeli Sheqel", + "value": "ILS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DOP - Dominican Peso", + "value": "DOP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GGP - Guernsey pound", + "value": "GGP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MDL - Moldovan Leu", + "value": "MDL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BSD - Bahamian Dollar", + "value": "BSD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SPL - Seborga Luigino", + "value": "SPL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SEK - Swedish Krona", + "value": "SEK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZMK - Zambian Kwacha", + "value": "ZMK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JEP - Jersey pound", + "value": "JEP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AUD - Australian Dollar", + "value": "AUD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SRD - Surinam Dollar", + "value": "SRD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CUP - Cuban Peso", + "value": "CUP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BBD - Barbados Dollar", + "value": "BBD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KMF - Comoro Franc", + "value": "KMF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KRW - South Korean Won", + "value": "KRW" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GMD - Dalasi", + "value": "GMD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VEF - Bolivar ", + "value": "VEF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IMP - Isle of Man Pound", + "value": "IMP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CUC - Peso Convertible", + "value": "CUC" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TVD - Tuvalu Dollar", + "value": "TVD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CLP - Chilean Peso", + "value": "CLP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LTL - Lithuanian Litas", + "value": "LTL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CDF - Congolese Franc", + "value": "CDF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XCD - East Caribbean Dollar", + "value": "XCD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KZT - Tenge", + "value": "KZT" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RUB - Russian Ruble", + "value": "RUB" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TTD - Trinidad and Tobago Dollar", + "value": "TTD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "OMR - Rial Omani", + "value": "OMR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BRL - Brazilian Real", + "value": "BRL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MMK - Kyat", + "value": "MMK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PLN - Zloty", + "value": "PLN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PYG - Guarani", + "value": "PYG" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KES - Kenyan Shilling", + "value": "KES" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SVC - El Salvador Colon", + "value": "SVC" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MKD - Denar", + "value": "MKD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AZN - Azerbaijanian Manat", + "value": "AZN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TOP - Pa'anga", + "value": "TOP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MVR - Rufiyaa", + "value": "MVR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VUV - Vatu", + "value": "VUV" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GNF - Guinea Franc", + "value": "GNF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "WST - Tala", + "value": "WST" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IQD - Iraqi Dinar", + "value": "IQD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ERN - Nakfa", + "value": "ERN" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BAM - Convertible Mark", + "value": "BAM" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SCR - Seychelles Rupee", + "value": "SCR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CAD - Canadian Dollar", + "value": "CAD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CVE - Cape Verde Escudo", + "value": "CVE" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KWD - Kuwaiti Dinar", + "value": "KWD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BIF - Burundi Franc", + "value": "BIF" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PGK - Kina", + "value": "PGK" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SOS - Somali Shilling", + "value": "SOS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SGD - Singapore Dollar", + "value": "SGD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UZS - Uzbekistan Sum", + "value": "UZS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "STD - Dobra", + "value": "STD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IRR - Iranian Rial", + "value": "IRR" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CNY - Yuan Renminbi", + "value": "CNY" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SLL - Leone", + "value": "SLL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TND - Tunisian Dinar", + "value": "TND" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GYD - Guyana Dollar", + "value": "GYD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NZD - New Zealand Dollar", + "value": "NZD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "FKP - Falkland Islands Pound", + "value": "FKP" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LVL - Latvian Lats", + "value": "LVL" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "USD - US Dollar", + "value": "USD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KGS - Som", + "value": "KGS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ARS - Argentine Peso", + "value": "ARS" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RON - New Romanian Leu", + "value": "RON" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GTQ - Quetzal", + "value": "GTQ" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RSD - Serbian Dinar", + "value": "RSD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BHD - Bahraini Dinar", + "value": "BHD" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JPY - Yen", + "value": "JPY" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SDG - Sudanese Pound", + "value": "SDG" + } + ], + "predicate": "impact:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "Insignificant: Impact absorbed by normal activities", + "value": "Insignificant" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Catastrophic: A business-ending event (don't choose this if the victim will continue operations)", + "value": "Catastrophic" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Distracting: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties", + "value": "Distracting" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Damaging: Real and serious effect on the \"bottom line\" and/or long-term ability to generate revenue", + "value": "Damaging" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Painful: Moderate \"hard costs\", and impact felt through having to deal with the incident rather than conducting normal duties has quantifiable indirect costs", + "value": "Painful" + } + ], + "predicate": "impact:overall_rating" + }, + { + "entry": [ + { + "expanded": "Not applicable", + "value": "NA" + } + ], + "predicate": "asset:management" + }, + { + "entry": [ + { + "expanded": "Internally managed", + "value": "Internal" + } + ], + "predicate": "asset:management" + }, + { + "entry": [ + { + "expanded": "Ownership known but not listed", + "value": "Other" + } + ], + "predicate": "asset:management" + }, + { + "entry": [ + { + "expanded": "Externally managed", + "value": "External" + } + ], + "predicate": "asset:management" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:management" + }, + { + "entry": [ + { + "expanded": "Bangladesh", + "value": "BD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Belgium", + "value": "BE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Burkina Faso", + "value": "BF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bulgaria", + "value": "BG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bosnia and Herzegovina", + "value": "BA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Barbados", + "value": "BB" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Wallis and Futuna Islands", + "value": "WF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint-Barthelemy", + "value": "BL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Brunei Darussalam", + "value": "BN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bolivia", + "value": "BO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bahrain", + "value": "BH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Burundi", + "value": "BI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Benin", + "value": "BJ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bhutan", + "value": "BT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Jamaica", + "value": "JM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bouvet Island", + "value": "BV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Botswana", + "value": "BW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Samoa", + "value": "WS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bonaire, Saint Eustatius and Saba", + "value": "BQ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Brazil", + "value": "BR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bahamas", + "value": "BS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Jersey", + "value": "JE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Belarus", + "value": "BY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Belize", + "value": "BZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Russian Federation", + "value": "RU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Rwanda", + "value": "RW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Serbia", + "value": "RS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Timor-Leste", + "value": "TL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Reunion", + "value": "RE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Turkmenistan", + "value": "TM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Bermuda", + "value": "BM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tajikistan", + "value": "TJ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Romania", + "value": "RO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tokelau", + "value": "TK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guinea-Bissau", + "value": "GW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guam", + "value": "GU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guatemala", + "value": "GT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "South Georgia and the South Sandwich Islands", + "value": "GS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Greece", + "value": "GR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Equatorial Guinea", + "value": "GQ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guadeloupe", + "value": "GP" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Japan", + "value": "JP" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guyana", + "value": "GY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guernsey", + "value": "GG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "French Guiana", + "value": "GF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Georgia", + "value": "GE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Grenada", + "value": "GD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "United Kingdom", + "value": "GB" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Gabon", + "value": "GA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "El Salvador", + "value": "SV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Guinea", + "value": "GN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Gambia", + "value": "GM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Greenland", + "value": "GL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Gibraltar", + "value": "GI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Ghana", + "value": "GH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Oman", + "value": "OM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tunisia", + "value": "TN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Jordan", + "value": "JO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Croatia", + "value": "HR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Haiti", + "value": "HT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Hungary", + "value": "HU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Hong Kong", + "value": "HK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Honduras", + "value": "HN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Heard Island and McDonal Islands", + "value": "HM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Venezuela (Bolivarian Republic of)", + "value": "VE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Puerto Rico", + "value": "PR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Palestinian Territory, Occupied", + "value": "PS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Palau", + "value": "PW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Portugal", + "value": "PT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Svalbard and Jan Mayen Islands", + "value": "SJ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Paraguay", + "value": "PY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Iraq", + "value": "IQ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Panama", + "value": "PA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "French Polynesia", + "value": "PF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Papua New Guinea", + "value": "PG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Peru", + "value": "PE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Pakistan", + "value": "PK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Philippines", + "value": "PH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Pitcairn", + "value": "PN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Poland", + "value": "PL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Pierre and Miquelon", + "value": "PM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Zambia", + "value": "ZM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Western Sahara", + "value": "EH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Estonia", + "value": "EE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Egypt", + "value": "EG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "South Africa", + "value": "ZA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Ecuador", + "value": "EC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Italy", + "value": "IT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Viet Nam", + "value": "VN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Solomon Islands", + "value": "SB" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Ethiopia", + "value": "ET" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Somalia", + "value": "SO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Zimbabwe", + "value": "ZW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saudi Arabia", + "value": "SA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Spain", + "value": "ES" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Eritrea", + "value": "ER" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Montenegro", + "value": "ME" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Moldova, Republic of", + "value": "MD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Madagascar", + "value": "MG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Martin (French part)", + "value": "MF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Morocco", + "value": "MA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Monaco", + "value": "MC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Uzbekistan", + "value": "UZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Myanmar", + "value": "MM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mali", + "value": "ML" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Macao", + "value": "MO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mongolia", + "value": "MN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Marshall Islands", + "value": "MH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Macedonia, The former Yugoslav Republic of", + "value": "MK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mauritius", + "value": "MU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Malta", + "value": "MT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Malawi", + "value": "MW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Maldives", + "value": "MV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Martinique", + "value": "MQ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Northern Mariana Islands", + "value": "MP" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Montserrat", + "value": "MS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mauritania", + "value": "MR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Isle of Man", + "value": "IM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Uganda", + "value": "UG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tanzania, United Republic of", + "value": "TZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Malaysia", + "value": "MY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mexico", + "value": "MX" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Israel", + "value": "IL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "France", + "value": "FR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "IO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Helena", + "value": "SH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Finland", + "value": "FI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Fiji", + "value": "FJ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Faeroe Islands", + "value": "FK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Micronesia (Federated States of)", + "value": "FM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Falkland Islands (Malvinas)", + "value": "FO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Nicaragua", + "value": "NI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Netherlands", + "value": "NL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Norway", + "value": "NO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Namibia", + "value": "NA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Vanuatu", + "value": "VU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "New Caledonia", + "value": "NC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Niger", + "value": "NE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Norfolk Island", + "value": "NF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Nigeria", + "value": "NG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "New Zealand", + "value": "NZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Nepal", + "value": "NP" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Nauru", + "value": "NR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Niue", + "value": "NU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cook Islands", + "value": "CK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cote d'Ivoire", + "value": "CI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Switzerland", + "value": "CH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Colombia", + "value": "CO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "China", + "value": "CN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cameroon", + "value": "CM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Chile", + "value": "CL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cocos (Keeling) Islands", + "value": "CC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Canada", + "value": "CA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Congo", + "value": "CG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Central African Republic", + "value": "CF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Congo, Democratic Republic of the", + "value": "CD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Czech Republic", + "value": "CZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cyprus", + "value": "CY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Christmas Island", + "value": "CX" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Costa Rica", + "value": "CR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Curacao", + "value": "CW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cape Verde", + "value": "CV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cuba", + "value": "CU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Swaziland", + "value": "SZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Syrian Arab Republic", + "value": "SY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sint Maarten (Dutch part)", + "value": "SX" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Kyrgyzstan", + "value": "KG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Kenya", + "value": "KE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "South Sudan", + "value": "SS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Suriname", + "value": "SR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Kiribati", + "value": "KI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cambodia", + "value": "KH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Kitts and Nevis", + "value": "KN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Comoros", + "value": "KM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sao Tome and Principe", + "value": "ST" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Slovakia", + "value": "SK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Korea, Republic of", + "value": "KR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Slovenia", + "value": "SI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Korea, Democratic People's Republic of", + "value": "KP" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Kuwait", + "value": "KW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Senegal", + "value": "SN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "San Marino", + "value": "SM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sierra Leone", + "value": "SL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Seychelles", + "value": "SC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Kazakhstan", + "value": "KZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Cayman Islands", + "value": "KY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Singapore", + "value": "SG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sweden", + "value": "SE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sudan", + "value": "SD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Dominican Republic", + "value": "DO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Dominica", + "value": "DM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Djibouti", + "value": "DJ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Denmark", + "value": "DK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "VG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Germany", + "value": "DE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Yemen", + "value": "YE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Algeria", + "value": "DZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "United States of America", + "value": "US" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Uruguay", + "value": "UY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mayotte", + "value": "YT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "United States Minor Outlying Islands", + "value": "UM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Lebanon", + "value": "LB" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Lucia", + "value": "LC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Lao People's Democratic Republic", + "value": "LA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tuvalu", + "value": "TV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Taiwan, Province of China", + "value": "TW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Trinidad and Tobago", + "value": "TT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Turkey", + "value": "TR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Sri Lanka", + "value": "LK" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Liechtenstein", + "value": "LI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Latvia", + "value": "LV" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Tonga", + "value": "TO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Lithuania", + "value": "LT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Luxembourg", + "value": "LU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Liberia", + "value": "LR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Lesotho", + "value": "LS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Thailand", + "value": "TH" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "French Southern Territories", + "value": "TF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Togo", + "value": "TG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Chad", + "value": "TD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Turks and Caicos Islands", + "value": "TC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Libya", + "value": "LY" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Holy See", + "value": "VA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Saint Vincent and the Grenadines", + "value": "VC" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "United Arab Emirates", + "value": "AE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Andorra", + "value": "AD" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Antigua and Barbuda", + "value": "AG" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Afghanistan", + "value": "AF" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Anguilla", + "value": "AI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "United States Virgin Islands", + "value": "VI" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Iceland", + "value": "IS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Iran (Islamic Republic of)", + "value": "IR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Armenia", + "value": "AM" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Albania", + "value": "AL" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Angola", + "value": "AO" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Antarctica", + "value": "AQ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "American Samoa", + "value": "AS" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Argentina", + "value": "AR" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Australia", + "value": "AU" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Austria", + "value": "AT" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Aruba", + "value": "AW" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "India", + "value": "IN" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Aland Islands", + "value": "AX" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Azerbaijan", + "value": "AZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Ireland", + "value": "IE" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Indonesia", + "value": "ID" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Ukraine", + "value": "UA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Qatar", + "value": "QA" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Mozambique", + "value": "MZ" + } + ], + "predicate": "asset:country" + }, + { + "entry": [ + { + "expanded": "Externally hosted in a shared environment", + "value": "External shared" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Externally hosted in a dedicated environment", + "value": "External dedicated" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Not applicable", + "value": "NA" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Internally hosted", + "value": "Internal" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Externally hosted (unsure if dedicated or shared)", + "value": "External" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Hosting known but not listed", + "value": "Other" + } + ], + "predicate": "asset:hosting" + }, + { + "entry": [ + { + "expanded": "Hosted by 3rd party", + "value": "3rd party hosted" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Managed by 3rd party", + "value": "3rd party managed" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Owned by 3rd party", + "value": "3rd party owned" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Governance known but not listed", + "value": "Other" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "The victim owns and controls the asset", + "value": "Victim governed" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Personally owned asset", + "value": "Personally owned" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Isolated internal asset", + "value": "Internally isolated" + } + ], + "predicate": "asset:governance" + }, + { + "entry": [ + { + "expanded": "Not applicable", + "value": "NA" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Internally isolated or restricted environment", + "value": "Isolated" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Internally accessible", + "value": "Internal" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Publicly accessible", + "value": "External" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Accessibility known but not listed", + "value": "Other" + } + ], + "predicate": "asset:accessibility" + }, + { + "entry": [ + { + "expanded": "Customer owned", + "value": "Customer" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Owner known but not listed", + "value": "Other" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Victim owned", + "value": "Victim" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Not applicable", + "value": "NA" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Employee owned", + "value": "Employee" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "Partner owned", + "value": "Partner" + } + ], + "predicate": "asset:ownership" + }, + { + "entry": [ + { + "expanded": "It is known no cloud assets were involved", + "value": "NA" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "It is known that a cloud asset was involved and it being a cloud asset did not affect the outcome", + "value": "No" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Misconfiguration or error by hosting provider", + "value": "Hosting error" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Elevation of privilege by another customer in shared environment", + "value": "User breakout" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "The involvement of cloud assets was not measured", + "value": "Unknown" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Penetration of another web site on shared device", + "value": "Customer attack" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Lack of security process or procedure by hosting provider", + "value": "Hosting governance" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Hypervisor break-out attack", + "value": "Hypervisor" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Cloud hosting known but not listed", + "value": "Other" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Application vulnerability in partner-developed application", + "value": "Partner application" + } + ], + "predicate": "asset:cloud" + }, + { + "entry": [ + { + "expanded": "Bangladesh", + "value": "BD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Belgium", + "value": "BE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Burkina Faso", + "value": "BF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bulgaria", + "value": "BG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bosnia and Herzegovina", + "value": "BA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Barbados", + "value": "BB" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Wallis and Futuna Islands", + "value": "WF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint-Barthelemy", + "value": "BL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Brunei Darussalam", + "value": "BN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bolivia", + "value": "BO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bahrain", + "value": "BH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Burundi", + "value": "BI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Benin", + "value": "BJ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bhutan", + "value": "BT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Jamaica", + "value": "JM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bouvet Island", + "value": "BV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Botswana", + "value": "BW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Samoa", + "value": "WS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bonaire, Saint Eustatius and Saba", + "value": "BQ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Brazil", + "value": "BR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bahamas", + "value": "BS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Jersey", + "value": "JE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Belarus", + "value": "BY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Belize", + "value": "BZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Russian Federation", + "value": "RU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Rwanda", + "value": "RW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Serbia", + "value": "RS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Timor-Leste", + "value": "TL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Reunion", + "value": "RE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Turkmenistan", + "value": "TM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Bermuda", + "value": "BM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tajikistan", + "value": "TJ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Romania", + "value": "RO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tokelau", + "value": "TK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guinea-Bissau", + "value": "GW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guam", + "value": "GU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guatemala", + "value": "GT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "South Georgia and the South Sandwich Islands", + "value": "GS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Greece", + "value": "GR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Equatorial Guinea", + "value": "GQ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guadeloupe", + "value": "GP" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Japan", + "value": "JP" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guyana", + "value": "GY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guernsey", + "value": "GG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "French Guiana", + "value": "GF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Georgia", + "value": "GE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Grenada", + "value": "GD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "United Kingdom", + "value": "GB" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Gabon", + "value": "GA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "El Salvador", + "value": "SV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Guinea", + "value": "GN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Gambia", + "value": "GM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Greenland", + "value": "GL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Gibraltar", + "value": "GI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Ghana", + "value": "GH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Oman", + "value": "OM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tunisia", + "value": "TN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Jordan", + "value": "JO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Croatia", + "value": "HR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Haiti", + "value": "HT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Hungary", + "value": "HU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Hong Kong", + "value": "HK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Honduras", + "value": "HN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Heard Island and McDonal Islands", + "value": "HM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Venezuela (Bolivarian Republic of)", + "value": "VE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Puerto Rico", + "value": "PR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Palestinian Territory, Occupied", + "value": "PS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Palau", + "value": "PW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Portugal", + "value": "PT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Svalbard and Jan Mayen Islands", + "value": "SJ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Paraguay", + "value": "PY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Iraq", + "value": "IQ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Panama", + "value": "PA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "French Polynesia", + "value": "PF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Papua New Guinea", + "value": "PG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Peru", + "value": "PE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Pakistan", + "value": "PK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Philippines", + "value": "PH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Pitcairn", + "value": "PN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Poland", + "value": "PL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Pierre and Miquelon", + "value": "PM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Zambia", + "value": "ZM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Western Sahara", + "value": "EH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Estonia", + "value": "EE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Egypt", + "value": "EG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "South Africa", + "value": "ZA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Ecuador", + "value": "EC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Italy", + "value": "IT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Viet Nam", + "value": "VN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Solomon Islands", + "value": "SB" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Ethiopia", + "value": "ET" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Somalia", + "value": "SO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Zimbabwe", + "value": "ZW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saudi Arabia", + "value": "SA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Spain", + "value": "ES" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Eritrea", + "value": "ER" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Montenegro", + "value": "ME" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Moldova, Republic of", + "value": "MD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Madagascar", + "value": "MG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Martin (French part)", + "value": "MF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Morocco", + "value": "MA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Monaco", + "value": "MC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Uzbekistan", + "value": "UZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Myanmar", + "value": "MM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mali", + "value": "ML" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Macao", + "value": "MO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mongolia", + "value": "MN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Marshall Islands", + "value": "MH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Macedonia, The former Yugoslav Republic of", + "value": "MK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mauritius", + "value": "MU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Malta", + "value": "MT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Malawi", + "value": "MW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Maldives", + "value": "MV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Martinique", + "value": "MQ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Northern Mariana Islands", + "value": "MP" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Montserrat", + "value": "MS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mauritania", + "value": "MR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Isle of Man", + "value": "IM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Uganda", + "value": "UG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tanzania, United Republic of", + "value": "TZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Malaysia", + "value": "MY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mexico", + "value": "MX" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Israel", + "value": "IL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "France", + "value": "FR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "IO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Helena", + "value": "SH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Finland", + "value": "FI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Fiji", + "value": "FJ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Faeroe Islands", + "value": "FK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Micronesia (Federated States of)", + "value": "FM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Falkland Islands (Malvinas)", + "value": "FO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Nicaragua", + "value": "NI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Netherlands", + "value": "NL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Norway", + "value": "NO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Namibia", + "value": "NA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Vanuatu", + "value": "VU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "New Caledonia", + "value": "NC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Niger", + "value": "NE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Norfolk Island", + "value": "NF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Nigeria", + "value": "NG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "New Zealand", + "value": "NZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Nepal", + "value": "NP" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Nauru", + "value": "NR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Niue", + "value": "NU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cook Islands", + "value": "CK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cote d'Ivoire", + "value": "CI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Switzerland", + "value": "CH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Colombia", + "value": "CO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "China", + "value": "CN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cameroon", + "value": "CM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Chile", + "value": "CL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cocos (Keeling) Islands", + "value": "CC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Canada", + "value": "CA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Congo", + "value": "CG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Central African Republic", + "value": "CF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Congo, Democratic Republic of the", + "value": "CD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Czech Republic", + "value": "CZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cyprus", + "value": "CY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Christmas Island", + "value": "CX" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Costa Rica", + "value": "CR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Curacao", + "value": "CW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cape Verde", + "value": "CV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cuba", + "value": "CU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Swaziland", + "value": "SZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Syrian Arab Republic", + "value": "SY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sint Maarten (Dutch part)", + "value": "SX" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Kyrgyzstan", + "value": "KG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Kenya", + "value": "KE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "South Sudan", + "value": "SS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Suriname", + "value": "SR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Kiribati", + "value": "KI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cambodia", + "value": "KH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Kitts and Nevis", + "value": "KN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Comoros", + "value": "KM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sao Tome and Principe", + "value": "ST" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Slovakia", + "value": "SK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Korea, Republic of", + "value": "KR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Slovenia", + "value": "SI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Korea, Democratic People's Republic of", + "value": "KP" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Kuwait", + "value": "KW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Senegal", + "value": "SN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "San Marino", + "value": "SM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sierra Leone", + "value": "SL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Seychelles", + "value": "SC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Kazakhstan", + "value": "KZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Cayman Islands", + "value": "KY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Singapore", + "value": "SG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sweden", + "value": "SE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sudan", + "value": "SD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Dominican Republic", + "value": "DO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Dominica", + "value": "DM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Djibouti", + "value": "DJ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Denmark", + "value": "DK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "VG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Germany", + "value": "DE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Yemen", + "value": "YE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Algeria", + "value": "DZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "United States of America", + "value": "US" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Uruguay", + "value": "UY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mayotte", + "value": "YT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "United States Minor Outlying Islands", + "value": "UM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Lebanon", + "value": "LB" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Lucia", + "value": "LC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Lao People's Democratic Republic", + "value": "LA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tuvalu", + "value": "TV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Taiwan, Province of China", + "value": "TW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Trinidad and Tobago", + "value": "TT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Turkey", + "value": "TR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Sri Lanka", + "value": "LK" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Liechtenstein", + "value": "LI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Latvia", + "value": "LV" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Tonga", + "value": "TO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Lithuania", + "value": "LT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Luxembourg", + "value": "LU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Liberia", + "value": "LR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Lesotho", + "value": "LS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Thailand", + "value": "TH" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "French Southern Territories", + "value": "TF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Togo", + "value": "TG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Chad", + "value": "TD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Turks and Caicos Islands", + "value": "TC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Libya", + "value": "LY" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Holy See", + "value": "VA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Saint Vincent and the Grenadines", + "value": "VC" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "United Arab Emirates", + "value": "AE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Andorra", + "value": "AD" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Antigua and Barbuda", + "value": "AG" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Afghanistan", + "value": "AF" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Anguilla", + "value": "AI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "United States Virgin Islands", + "value": "VI" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Iceland", + "value": "IS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Iran (Islamic Republic of)", + "value": "IR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Armenia", + "value": "AM" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Albania", + "value": "AL" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Angola", + "value": "AO" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Antarctica", + "value": "AQ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "American Samoa", + "value": "AS" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Argentina", + "value": "AR" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Australia", + "value": "AU" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Austria", + "value": "AT" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Aruba", + "value": "AW" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "India", + "value": "IN" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Aland Islands", + "value": "AX" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Azerbaijan", + "value": "AZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Ireland", + "value": "IE" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Indonesia", + "value": "ID" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Ukraine", + "value": "UA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Qatar", + "value": "QA" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "Mozambique", + "value": "MZ" + } + ], + "predicate": "victim:country" + }, + { + "entry": [ + { + "expanded": "1,001 to 10,000 employees", + "value": "1001 to 10000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "Over 100,0001 employees", + "value": "Over 100000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "Unknown number of employees", + "value": "Unknown" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "50,001 to 100,000 employees", + "value": "50001 to 100000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "25,001 to 50,000 employees", + "value": "25001 to 50000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "101 to 1,000 employees", + "value": "101 to 1000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "Large organizations (over 1,000 employees)", + "value": "Large" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "10,001 to 25,000 employees", + "value": "10001 to 25000" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "Small organizations (1,000 employees or less)", + "value": "Small" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "1 to 10 employees", + "value": "1 to 10" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "11 to 100 employees", + "value": "11 to 100" + } + ], + "predicate": "victim:employee_count" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "impact:loss:rating" + }, + { + "entry": [ + { + "expanded": "Major", + "value": "Major" + } + ], + "predicate": "impact:loss:rating" + }, + { + "entry": [ + { + "expanded": "Moderate", + "value": "Moderate" + } + ], + "predicate": "impact:loss:rating" + }, + { + "entry": [ + { + "expanded": "None", + "value": "None" + } + ], + "predicate": "impact:loss:rating" + }, + { + "entry": [ + { + "expanded": "Minor", + "value": "Minor" + } + ], + "predicate": "impact:loss:rating" + }, + { + "entry": [ + { + "expanded": "Legal and regulatory costs", + "value": "Legal and regulatory" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Asset and fraud-related losses", + "value": "Asset and fraud" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Business disruption", + "value": "Business disruption" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Response and recovery costs", + "value": "Response and recovery" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Loss of competitive advantage", + "value": "Competitive advantage" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Increased operating costs", + "value": "Operating costs" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Impact variety known but not listed.", + "value": "Other" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Brand and market damage", + "value": "Brand damage" + } + ], + "predicate": "impact:loss:variety" + }, + { + "entry": [ + { + "expanded": "Never", + "value": "Never" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Seconds", + "value": "Seconds" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Exfiltration does not apply in the context of the security event.", + "value": "NA" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Months", + "value": "Months" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Days", + "value": "Days" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Years", + "value": "Years" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Hours", + "value": "Hours" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Weeks", + "value": "Weeks" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Minutes", + "value": "Minutes" + } + ], + "predicate": "timeline:exfiltration:unit" + }, + { + "entry": [ + { + "expanded": "Never", + "value": "Never" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Seconds", + "value": "Seconds" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Containment does not apply in the context of the security event.", + "value": "NA" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Months", + "value": "Months" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Days", + "value": "Days" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Years", + "value": "Years" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Hours", + "value": "Hours" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Weeks", + "value": "Weeks" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Minutes", + "value": "Minutes" + } + ], + "predicate": "timeline:containment:unit" + }, + { + "entry": [ + { + "expanded": "Never", + "value": "Never" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Seconds", + "value": "Seconds" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Compromise does not apply in the context of the security event.", + "value": "NA" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Months", + "value": "Months" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Days", + "value": "Days" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Years", + "value": "Years" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Hours", + "value": "Hours" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Weeks", + "value": "Weeks" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Minutes", + "value": "Minutes" + } + ], + "predicate": "timeline:compromise:unit" + }, + { + "entry": [ + { + "expanded": "Never", + "value": "Never" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Seconds", + "value": "Seconds" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Discovery does not apply in the context of the security event.", + "value": "NA" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Months", + "value": "Months" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Days", + "value": "Days" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Years", + "value": "Years" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Hours", + "value": "Hours" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Weeks", + "value": "Weeks" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Minutes", + "value": "Minutes" + } + ], + "predicate": "timeline:discovery:unit" + }, + { + "entry": [ + { + "expanded": "Grudge or personal offense", + "value": "Grudge" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Financial or personal gain", + "value": "Financial" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Not Applicable (unintentional action)", + "value": "NA" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Ideology or protest", + "value": "Ideology" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Convenience of expediency", + "value": "Convenience" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Fun, curiosity, or pride", + "value": "Fun" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Fear or duress", + "value": "Fear" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Espionage or competitive advantage", + "value": "Espionage" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Aid in a different attack", + "value": "Secondary" + } + ], + "predicate": "actor:partner:motive" + }, + { + "entry": [ + { + "expanded": "Bangladesh", + "value": "BD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Belgium", + "value": "BE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Burkina Faso", + "value": "BF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bulgaria", + "value": "BG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bosnia and Herzegovina", + "value": "BA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Barbados", + "value": "BB" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Wallis and Futuna Islands", + "value": "WF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint-Barthelemy", + "value": "BL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Brunei Darussalam", + "value": "BN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bolivia", + "value": "BO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bahrain", + "value": "BH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Burundi", + "value": "BI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Benin", + "value": "BJ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bhutan", + "value": "BT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Jamaica", + "value": "JM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bouvet Island", + "value": "BV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Botswana", + "value": "BW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Samoa", + "value": "WS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bonaire, Saint Eustatius and Saba", + "value": "BQ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Brazil", + "value": "BR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bahamas", + "value": "BS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Jersey", + "value": "JE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Belarus", + "value": "BY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Belize", + "value": "BZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Russian Federation", + "value": "RU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Rwanda", + "value": "RW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Serbia", + "value": "RS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Timor-Leste", + "value": "TL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Reunion", + "value": "RE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Turkmenistan", + "value": "TM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Bermuda", + "value": "BM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tajikistan", + "value": "TJ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Romania", + "value": "RO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tokelau", + "value": "TK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guinea-Bissau", + "value": "GW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guam", + "value": "GU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guatemala", + "value": "GT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "South Georgia and the South Sandwich Islands", + "value": "GS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Greece", + "value": "GR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Equatorial Guinea", + "value": "GQ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guadeloupe", + "value": "GP" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Japan", + "value": "JP" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guyana", + "value": "GY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guernsey", + "value": "GG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "French Guiana", + "value": "GF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Georgia", + "value": "GE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Grenada", + "value": "GD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "United Kingdom", + "value": "GB" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Gabon", + "value": "GA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "El Salvador", + "value": "SV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Guinea", + "value": "GN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Gambia", + "value": "GM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Greenland", + "value": "GL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Gibraltar", + "value": "GI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Ghana", + "value": "GH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Oman", + "value": "OM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tunisia", + "value": "TN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Jordan", + "value": "JO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Croatia", + "value": "HR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Haiti", + "value": "HT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Hungary", + "value": "HU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Hong Kong", + "value": "HK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Honduras", + "value": "HN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Heard Island and McDonal Islands", + "value": "HM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Venezuela (Bolivarian Republic of)", + "value": "VE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Puerto Rico", + "value": "PR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Palestinian Territory, Occupied", + "value": "PS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Palau", + "value": "PW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Portugal", + "value": "PT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Svalbard and Jan Mayen Islands", + "value": "SJ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Paraguay", + "value": "PY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Iraq", + "value": "IQ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Panama", + "value": "PA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "French Polynesia", + "value": "PF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Papua New Guinea", + "value": "PG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Peru", + "value": "PE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Pakistan", + "value": "PK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Philippines", + "value": "PH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Pitcairn", + "value": "PN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Poland", + "value": "PL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Pierre and Miquelon", + "value": "PM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Zambia", + "value": "ZM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Western Sahara", + "value": "EH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Estonia", + "value": "EE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Egypt", + "value": "EG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "South Africa", + "value": "ZA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Ecuador", + "value": "EC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Italy", + "value": "IT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Viet Nam", + "value": "VN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Solomon Islands", + "value": "SB" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Ethiopia", + "value": "ET" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Somalia", + "value": "SO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Zimbabwe", + "value": "ZW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saudi Arabia", + "value": "SA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Spain", + "value": "ES" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Eritrea", + "value": "ER" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Montenegro", + "value": "ME" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Moldova, Republic of", + "value": "MD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Madagascar", + "value": "MG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Martin (French part)", + "value": "MF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Morocco", + "value": "MA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Monaco", + "value": "MC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Uzbekistan", + "value": "UZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Myanmar", + "value": "MM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mali", + "value": "ML" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Macao", + "value": "MO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mongolia", + "value": "MN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Marshall Islands", + "value": "MH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Macedonia, The former Yugoslav Republic of", + "value": "MK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mauritius", + "value": "MU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Malta", + "value": "MT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Malawi", + "value": "MW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Maldives", + "value": "MV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Martinique", + "value": "MQ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Northern Mariana Islands", + "value": "MP" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Montserrat", + "value": "MS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mauritania", + "value": "MR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Isle of Man", + "value": "IM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Uganda", + "value": "UG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tanzania, United Republic of", + "value": "TZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Malaysia", + "value": "MY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mexico", + "value": "MX" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Israel", + "value": "IL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "France", + "value": "FR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "IO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Helena", + "value": "SH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Finland", + "value": "FI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Fiji", + "value": "FJ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Faeroe Islands", + "value": "FK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Micronesia (Federated States of)", + "value": "FM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Falkland Islands (Malvinas)", + "value": "FO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Nicaragua", + "value": "NI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Netherlands", + "value": "NL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Norway", + "value": "NO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Namibia", + "value": "NA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Vanuatu", + "value": "VU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "New Caledonia", + "value": "NC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Niger", + "value": "NE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Norfolk Island", + "value": "NF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Nigeria", + "value": "NG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "New Zealand", + "value": "NZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Nepal", + "value": "NP" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Nauru", + "value": "NR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Niue", + "value": "NU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cook Islands", + "value": "CK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cote d'Ivoire", + "value": "CI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Switzerland", + "value": "CH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Colombia", + "value": "CO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "China", + "value": "CN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cameroon", + "value": "CM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Chile", + "value": "CL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cocos (Keeling) Islands", + "value": "CC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Canada", + "value": "CA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Congo", + "value": "CG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Central African Republic", + "value": "CF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Congo, Democratic Republic of the", + "value": "CD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Czech Republic", + "value": "CZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cyprus", + "value": "CY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Christmas Island", + "value": "CX" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Costa Rica", + "value": "CR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Curacao", + "value": "CW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cape Verde", + "value": "CV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cuba", + "value": "CU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Swaziland", + "value": "SZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Syrian Arab Republic", + "value": "SY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sint Maarten (Dutch part)", + "value": "SX" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Kyrgyzstan", + "value": "KG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Kenya", + "value": "KE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "South Sudan", + "value": "SS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Suriname", + "value": "SR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Kiribati", + "value": "KI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cambodia", + "value": "KH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Kitts and Nevis", + "value": "KN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Comoros", + "value": "KM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sao Tome and Principe", + "value": "ST" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Slovakia", + "value": "SK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Korea, Republic of", + "value": "KR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Slovenia", + "value": "SI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Korea, Democratic People's Republic of", + "value": "KP" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Kuwait", + "value": "KW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Senegal", + "value": "SN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "San Marino", + "value": "SM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sierra Leone", + "value": "SL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Seychelles", + "value": "SC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Kazakhstan", + "value": "KZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Cayman Islands", + "value": "KY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Singapore", + "value": "SG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sweden", + "value": "SE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sudan", + "value": "SD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Dominican Republic", + "value": "DO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Dominica", + "value": "DM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Djibouti", + "value": "DJ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Denmark", + "value": "DK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "VG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Germany", + "value": "DE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Yemen", + "value": "YE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Algeria", + "value": "DZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "United States of America", + "value": "US" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Uruguay", + "value": "UY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mayotte", + "value": "YT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "United States Minor Outlying Islands", + "value": "UM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Lebanon", + "value": "LB" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Lucia", + "value": "LC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Lao People's Democratic Republic", + "value": "LA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tuvalu", + "value": "TV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Taiwan, Province of China", + "value": "TW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Trinidad and Tobago", + "value": "TT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Turkey", + "value": "TR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Sri Lanka", + "value": "LK" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Liechtenstein", + "value": "LI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Latvia", + "value": "LV" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Tonga", + "value": "TO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Lithuania", + "value": "LT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Luxembourg", + "value": "LU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Liberia", + "value": "LR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Lesotho", + "value": "LS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Thailand", + "value": "TH" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "French Southern Territories", + "value": "TF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Togo", + "value": "TG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Chad", + "value": "TD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Turks and Caicos Islands", + "value": "TC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Libya", + "value": "LY" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Holy See", + "value": "VA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Saint Vincent and the Grenadines", + "value": "VC" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "United Arab Emirates", + "value": "AE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Andorra", + "value": "AD" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Antigua and Barbuda", + "value": "AG" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Afghanistan", + "value": "AF" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Anguilla", + "value": "AI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "United States Virgin Islands", + "value": "VI" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Iceland", + "value": "IS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Iran (Islamic Republic of)", + "value": "IR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Armenia", + "value": "AM" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Albania", + "value": "AL" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Angola", + "value": "AO" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Antarctica", + "value": "AQ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "American Samoa", + "value": "AS" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Argentina", + "value": "AR" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Australia", + "value": "AU" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Austria", + "value": "AT" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Aruba", + "value": "AW" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "India", + "value": "IN" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Aland Islands", + "value": "AX" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Azerbaijan", + "value": "AZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Ireland", + "value": "IE" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Indonesia", + "value": "ID" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Ukraine", + "value": "UA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Qatar", + "value": "QA" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Mozambique", + "value": "MZ" + } + ], + "predicate": "actor:partner:country" + }, + { + "entry": [ + { + "expanded": "Grudge or personal offense", + "value": "Grudge" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Financial or personal gain", + "value": "Financial" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Not Applicable (unintentional action)", + "value": "NA" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Ideology or protest", + "value": "Ideology" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Convenience of expediency", + "value": "Convenience" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Fun, curiosity, or pride", + "value": "Fun" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Fear or duress", + "value": "Fear" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Espionage or competitive advantage", + "value": "Espionage" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Aid in a different attack", + "value": "Secondary" + } + ], + "predicate": "actor:internal:motive" + }, + { + "entry": [ + { + "expanded": "Lateral move", + "value": "Lateral move" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Fired, laid off, or let go", + "value": "Let go" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Personal issues", + "value": "Personal issues" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recent poor job evaluation", + "value": "Job eval" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recently reprimanded", + "value": "Reprimanded" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recently hired", + "value": "Hired" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recently passed over for promotion", + "value": "Passed over" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recently demoted or hours reduced", + "value": "Demoted" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Recently promoted", + "value": "Promoted" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Preparing to resign or recently resigned", + "value": "Resigned" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:internal:job_change" + }, + { + "entry": [ + { + "expanded": "End-user or regular employee", + "value": "End-user" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Human resources staff", + "value": "Human resources" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Finance or accounting staff", + "value": "Finance" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Helpdesk staff", + "value": "Helpdesk" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Executive or upper management", + "value": "Executive" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Cashier, teller, or waiter", + "value": "Cashier" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Manager or supervisor", + "value": "Manager" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "A doctor or a nurse", + "value": "Doctor or nurse" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Security guard", + "value": "Guard" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Auditor", + "value": "Auditor" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Maintenance or janitorial staff", + "value": "Maintenance" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Call center staff", + "value": "Call center" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "System or network administrator", + "value": "System admin" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Software developer", + "value": "Developer" + } + ], + "predicate": "actor:internal:variety" + }, + { + "entry": [ + { + "expanded": "Grudge or personal offense", + "value": "Grudge" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Financial or personal gain", + "value": "Financial" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Not Applicable (unintentional action)", + "value": "NA" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Ideology or protest", + "value": "Ideology" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Convenience of expediency", + "value": "Convenience" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Fun, curiosity, or pride", + "value": "Fun" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Fear or duress", + "value": "Fear" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Espionage or competitive advantage", + "value": "Espionage" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Aid in a different attack", + "value": "Secondary" + } + ], + "predicate": "actor:external:motive" + }, + { + "entry": [ + { + "expanded": "Bangladesh", + "value": "BD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Belgium", + "value": "BE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Burkina Faso", + "value": "BF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bulgaria", + "value": "BG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bosnia and Herzegovina", + "value": "BA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Barbados", + "value": "BB" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Wallis and Futuna Islands", + "value": "WF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint-Barthelemy", + "value": "BL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Brunei Darussalam", + "value": "BN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bolivia", + "value": "BO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bahrain", + "value": "BH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Burundi", + "value": "BI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Benin", + "value": "BJ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bhutan", + "value": "BT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Jamaica", + "value": "JM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bouvet Island", + "value": "BV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Botswana", + "value": "BW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Samoa", + "value": "WS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bonaire, Saint Eustatius and Saba", + "value": "BQ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Brazil", + "value": "BR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bahamas", + "value": "BS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Jersey", + "value": "JE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Belarus", + "value": "BY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Belize", + "value": "BZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Russian Federation", + "value": "RU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Rwanda", + "value": "RW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Serbia", + "value": "RS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Timor-Leste", + "value": "TL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Reunion", + "value": "RE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Turkmenistan", + "value": "TM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Bermuda", + "value": "BM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tajikistan", + "value": "TJ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Romania", + "value": "RO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tokelau", + "value": "TK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guinea-Bissau", + "value": "GW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guam", + "value": "GU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guatemala", + "value": "GT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "South Georgia and the South Sandwich Islands", + "value": "GS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Greece", + "value": "GR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Equatorial Guinea", + "value": "GQ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guadeloupe", + "value": "GP" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Japan", + "value": "JP" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guyana", + "value": "GY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guernsey", + "value": "GG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "French Guiana", + "value": "GF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Georgia", + "value": "GE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Grenada", + "value": "GD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "United Kingdom", + "value": "GB" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Gabon", + "value": "GA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "El Salvador", + "value": "SV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Guinea", + "value": "GN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Gambia", + "value": "GM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Greenland", + "value": "GL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Gibraltar", + "value": "GI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Ghana", + "value": "GH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Oman", + "value": "OM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tunisia", + "value": "TN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Jordan", + "value": "JO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Croatia", + "value": "HR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Haiti", + "value": "HT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Hungary", + "value": "HU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Hong Kong", + "value": "HK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Honduras", + "value": "HN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Heard Island and McDonal Islands", + "value": "HM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Venezuela (Bolivarian Republic of)", + "value": "VE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Puerto Rico", + "value": "PR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Palestinian Territory, Occupied", + "value": "PS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Palau", + "value": "PW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Portugal", + "value": "PT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Svalbard and Jan Mayen Islands", + "value": "SJ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Paraguay", + "value": "PY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Iraq", + "value": "IQ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Panama", + "value": "PA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "French Polynesia", + "value": "PF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Papua New Guinea", + "value": "PG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Peru", + "value": "PE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Pakistan", + "value": "PK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Philippines", + "value": "PH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Pitcairn", + "value": "PN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Poland", + "value": "PL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Pierre and Miquelon", + "value": "PM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Zambia", + "value": "ZM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Western Sahara", + "value": "EH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Estonia", + "value": "EE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Egypt", + "value": "EG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "South Africa", + "value": "ZA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Ecuador", + "value": "EC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Italy", + "value": "IT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Viet Nam", + "value": "VN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Solomon Islands", + "value": "SB" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Ethiopia", + "value": "ET" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Somalia", + "value": "SO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Zimbabwe", + "value": "ZW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saudi Arabia", + "value": "SA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Spain", + "value": "ES" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Eritrea", + "value": "ER" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Montenegro", + "value": "ME" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Moldova, Republic of", + "value": "MD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Madagascar", + "value": "MG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Martin (French part)", + "value": "MF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Morocco", + "value": "MA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Monaco", + "value": "MC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Uzbekistan", + "value": "UZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Myanmar", + "value": "MM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mali", + "value": "ML" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Macao", + "value": "MO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mongolia", + "value": "MN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Marshall Islands", + "value": "MH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Macedonia, The former Yugoslav Republic of", + "value": "MK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mauritius", + "value": "MU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Malta", + "value": "MT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Malawi", + "value": "MW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Maldives", + "value": "MV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Martinique", + "value": "MQ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Northern Mariana Islands", + "value": "MP" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Montserrat", + "value": "MS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mauritania", + "value": "MR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Isle of Man", + "value": "IM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Uganda", + "value": "UG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tanzania, United Republic of", + "value": "TZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Malaysia", + "value": "MY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mexico", + "value": "MX" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Israel", + "value": "IL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "France", + "value": "FR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "IO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Helena", + "value": "SH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Finland", + "value": "FI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Fiji", + "value": "FJ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Faeroe Islands", + "value": "FK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Micronesia (Federated States of)", + "value": "FM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Falkland Islands (Malvinas)", + "value": "FO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Nicaragua", + "value": "NI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Netherlands", + "value": "NL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Norway", + "value": "NO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Namibia", + "value": "NA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Vanuatu", + "value": "VU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "New Caledonia", + "value": "NC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Niger", + "value": "NE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Norfolk Island", + "value": "NF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Nigeria", + "value": "NG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "New Zealand", + "value": "NZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Nepal", + "value": "NP" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Nauru", + "value": "NR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Niue", + "value": "NU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cook Islands", + "value": "CK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cote d'Ivoire", + "value": "CI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Switzerland", + "value": "CH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Colombia", + "value": "CO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "China", + "value": "CN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cameroon", + "value": "CM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Chile", + "value": "CL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cocos (Keeling) Islands", + "value": "CC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Canada", + "value": "CA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Congo", + "value": "CG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Central African Republic", + "value": "CF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Congo, Democratic Republic of the", + "value": "CD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Czech Republic", + "value": "CZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cyprus", + "value": "CY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Christmas Island", + "value": "CX" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Costa Rica", + "value": "CR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Curacao", + "value": "CW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cape Verde", + "value": "CV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cuba", + "value": "CU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Swaziland", + "value": "SZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Syrian Arab Republic", + "value": "SY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sint Maarten (Dutch part)", + "value": "SX" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Kyrgyzstan", + "value": "KG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Kenya", + "value": "KE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "South Sudan", + "value": "SS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Suriname", + "value": "SR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Kiribati", + "value": "KI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cambodia", + "value": "KH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Kitts and Nevis", + "value": "KN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Comoros", + "value": "KM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sao Tome and Principe", + "value": "ST" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Slovakia", + "value": "SK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Korea, Republic of", + "value": "KR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Slovenia", + "value": "SI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Korea, Democratic People's Republic of", + "value": "KP" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Kuwait", + "value": "KW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Senegal", + "value": "SN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "San Marino", + "value": "SM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sierra Leone", + "value": "SL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Seychelles", + "value": "SC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Kazakhstan", + "value": "KZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Cayman Islands", + "value": "KY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Singapore", + "value": "SG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sweden", + "value": "SE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sudan", + "value": "SD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Dominican Republic", + "value": "DO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Dominica", + "value": "DM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Djibouti", + "value": "DJ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Denmark", + "value": "DK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "British Virgin Islands", + "value": "VG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Germany", + "value": "DE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Yemen", + "value": "YE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Algeria", + "value": "DZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "United States of America", + "value": "US" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Uruguay", + "value": "UY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mayotte", + "value": "YT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "United States Minor Outlying Islands", + "value": "UM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Lebanon", + "value": "LB" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Lucia", + "value": "LC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Lao People's Democratic Republic", + "value": "LA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tuvalu", + "value": "TV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Taiwan, Province of China", + "value": "TW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Trinidad and Tobago", + "value": "TT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Turkey", + "value": "TR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Sri Lanka", + "value": "LK" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Liechtenstein", + "value": "LI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Latvia", + "value": "LV" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Tonga", + "value": "TO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Lithuania", + "value": "LT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Luxembourg", + "value": "LU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Liberia", + "value": "LR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Lesotho", + "value": "LS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Thailand", + "value": "TH" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "French Southern Territories", + "value": "TF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Togo", + "value": "TG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Chad", + "value": "TD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Turks and Caicos Islands", + "value": "TC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Libya", + "value": "LY" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Holy See", + "value": "VA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Saint Vincent and the Grenadines", + "value": "VC" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "United Arab Emirates", + "value": "AE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Andorra", + "value": "AD" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Antigua and Barbuda", + "value": "AG" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Afghanistan", + "value": "AF" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Anguilla", + "value": "AI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "United States Virgin Islands", + "value": "VI" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Iceland", + "value": "IS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Iran (Islamic Republic of)", + "value": "IR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Armenia", + "value": "AM" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Albania", + "value": "AL" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Angola", + "value": "AO" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Antarctica", + "value": "AQ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "American Samoa", + "value": "AS" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Argentina", + "value": "AR" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Australia", + "value": "AU" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Austria", + "value": "AT" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Aruba", + "value": "AW" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "India", + "value": "IN" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Aland Islands", + "value": "AX" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Azerbaijan", + "value": "AZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Ireland", + "value": "IE" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Indonesia", + "value": "ID" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Ukraine", + "value": "UA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Qatar", + "value": "QA" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Mozambique", + "value": "MZ" + } + ], + "predicate": "actor:external:country" + }, + { + "entry": [ + { + "expanded": "Customer (B2C)", + "value": "Customer" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Organized or professional criminal group", + "value": "Organized crime" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Relative or acquaintance of employee", + "value": "Acquaintance" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Competitor", + "value": "Competitor" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Unaffiliated person(s)", + "value": "Unaffiliated" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Force majeure (nature and chance)", + "value": "Force majeure" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Former employee (no longer had access)", + "value": "Former employee" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Nation-state", + "value": "Nation-state" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Activist group", + "value": "Activist" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Terrorist group", + "value": "Terrorist" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Auditor", + "value": "Auditor" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "State-sponsored or affiliated group", + "value": "State-affiliated" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "actor:external:variety" + }, + { + "entry": [ + { + "expanded": "Embedded - A dedicated device that collects data about the physical world", + "value": "E - Telemetry" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Unknown type of asset", + "value": "Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - The output of a fax machine", + "value": "M - Fax" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Disk media (e.g., CDs, DVDs)", + "value": "M - Disk media" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Payment card (e.g., magstripe, EMV)", + "value": "M - Payment card" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Mobile phone or smartphone", + "value": "U - Mobile phone" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Self-service kiosk", + "value": "T - Kiosk" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Former employee", + "value": "P - Former employee" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - POS terminal", + "value": "U - POS terminal" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Mobile broadband network", + "value": "N - Broadband" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Variety not known", + "value": "U - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Telephone", + "value": "N - Telephone" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Finance", + "value": "P - Finance" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - VoIP adapter", + "value": "N - VoIP adapter" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Payment switch or gateway", + "value": "S - Payment switch" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Authentication token or device", + "value": "U - Auth token" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Variety known but not listed", + "value": "U - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Remote access", + "value": "S - Remote access" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Documents", + "value": "M - Documents" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Variety known but not listed", + "value": "T - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Distributed control system (DCS)", + "value": "S - DCS" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Private branch exchange (PBX)", + "value": "N - PBX" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - DHCP", + "value": "S - DHCP" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Wired LAN", + "value": "N - LAN" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Automated Teller Machine (ATM)", + "value": "T - ATM" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Public WAN", + "value": "N - Public WAN" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Embedded - Variety not known", + "value": "E - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - End-user", + "value": "P - End-user" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - IDS or IPs", + "value": "N - IDS" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Desktop or workstation", + "value": "U - Desktop" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Variety known but not listed", + "value": "N - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Tablet", + "value": "U - Tablet" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Firewall", + "value": "N - Firewall" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Hard disk drive", + "value": "M - Disk drive" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Servers maintaining or deploying configurations or patches to other assets", + "value": "S - Configuration or patch management" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Industrial Control System (ICS). Includes Supervisory Control And Data Acquisition (SCADA) systems.", + "value": "S - ICS" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Human resources", + "value": "P - Human resources" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - File", + "value": "S - File" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Wireless LAN", + "value": "N - WLAN" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Database", + "value": "S - Database" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Camera or surveillance system", + "value": "N - Camera" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Variety not known", + "value": "N - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Media player or recorder", + "value": "U - Media" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Detached PIN pad or card reader", + "value": "T - PED pad" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Remote terminal unit (RTU)", + "value": "N - RTU" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Authentication", + "value": "S - Authentication" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Router or switch", + "value": "N - Router or switch" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Hardware security module (HSM)", + "value": "N - HSM" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Mail", + "value": "S - Mail" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Storage area network (SAN)", + "value": "N - SAN" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Programmable logic controller (PLC)", + "value": "N - PLC" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Cashier", + "value": "P - Cashier" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Gas \"pay-at-the-pump\" terminal", + "value": "T - Gas terminal" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Variety not known", + "value": "P - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Mainframe", + "value": "S - Mainframe" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Laptop", + "value": "U - Laptop" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Auditor", + "value": "P - Auditor" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - VoIP phone", + "value": "U - VoIP phone" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Embedded - A dedicated device that affects the real world", + "value": "E - Telematics" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - DNS", + "value": "S - DNS" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Log or event management", + "value": "S - Log" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Variety known but not listed", + "value": "P - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Proxy", + "value": "S - Proxy" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Public Terminal - Variety not known", + "value": "T - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Access control reader (e.g., badge, biometric)", + "value": "N - Access reader" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Web application", + "value": "S - Web application" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - POS controller", + "value": "S - POS controller" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Manager", + "value": "P - Manager" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Flash drive or card", + "value": "M - Flash drive" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Print", + "value": "S - Print" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Guard", + "value": "P - Guard" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Variety known but not listed", + "value": "M - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Variety known but not listed", + "value": "S - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Administrator", + "value": "P - System admin" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Variety not known", + "value": "S - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Asset type known but not User Device, Server, Public Terminal, Server, People, Network, or Media", + "value": "Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Call center", + "value": "P - Call center" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Network area storage (NAS)", + "value": "N - NAS" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Embedded - Variety known but not listed", + "value": "E - Other" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Code repository", + "value": "S - Code repository" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Developer", + "value": "P - Developer" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Identity smart card", + "value": "M - Smart card" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Executive", + "value": "P - Executive" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Customer", + "value": "P - Customer" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Directory (LDAP, AD)", + "value": "S - Directory" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Network - Private WAN", + "value": "N - Private WAN" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Helpdesk", + "value": "P - Helpdesk" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Peripheral (e.g., printer, copier, fax)", + "value": "U - Peripheral" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Partner", + "value": "P - Partner" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "People - Maintenance", + "value": "P - Maintenance" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Virtual Host", + "value": "S - VM host" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Variety not known", + "value": "M - Unknown" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Media - Backup tapes", + "value": "M - Tapes" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "User Device - Telephone", + "value": "U - Telephone" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "Server - Backup", + "value": "S - Backup" + } + ], + "predicate": "asset:assets:variety" + }, + { + "entry": [ + { + "expanded": "DZD - Algerian Dinar", + "value": "DZD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NAD - Namibia Dollar", + "value": "NAD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GHS - Ghana Cedi", + "value": "GHS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "EGP - Egyptian Pound", + "value": "EGP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BGN - Bulgarian Lev", + "value": "BGN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PAB - Balboa", + "value": "PAB" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BOB - Boliviano", + "value": "BOB" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DKK - Danish Krone", + "value": "DKK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BWP - Pula", + "value": "BWP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LBP - Lebanese Pound", + "value": "LBP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TZS - Tanzanian Shilling", + "value": "TZS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VND - Dong", + "value": "VND" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AOA - Kwanza", + "value": "AOA" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KHR - Riel", + "value": "KHR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MYR - Malaysian Ringgit", + "value": "MYR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KYD - Cayman Islands Dollar", + "value": "KYD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LYD - Libyan Dinar", + "value": "LYD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UAH - Hryvnia", + "value": "UAH" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JOD - Jordanian Dinar", + "value": "JOD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AWG - Aruban Florin", + "value": "AWG" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SAR - Saudi Riyal", + "value": "SAR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "EUR - Euro", + "value": "EUR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HKD - Hong Kong Dollar", + "value": "HKD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CHF - Swiss Franc", + "value": "CHF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GIP - Gibraltar Pound", + "value": "GIP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BYR - Belarussian Ruble", + "value": "BYR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ALL - Lek", + "value": "ALL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MRO - Ouguiya", + "value": "MRO" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HRK - Croatian Kuna", + "value": "HRK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DJF - Djibouti Franc", + "value": "DJF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SZL - Lilangeni", + "value": "SZL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "THB - Baht", + "value": "THB" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XAF - CFA Franc BEAC", + "value": "XAF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BND - Brunei Dollar", + "value": "BND" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ISK - Iceland Krona", + "value": "ISK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UYU - Peso Uruguayo", + "value": "UYU" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NIO - Cordoba Oro", + "value": "NIO" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LAK - Kip", + "value": "LAK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SYP - Syrian Pound", + "value": "SYP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MAD - Moroccan Dirham", + "value": "MAD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MZN - Mozambique Metical", + "value": "MZN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PHP - Philippine Peso", + "value": "PHP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZAR - South African Rand", + "value": "ZAR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NPR - Nepalese Rupee", + "value": "NPR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NGN - Naira", + "value": "NGN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZWD - Zimbabwean Dollar A/06", + "value": "ZWD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CRC - Costa Rican Colon", + "value": "CRC" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AED - UAE Dirham", + "value": "AED" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GBP - Pound Sterling", + "value": "GBP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MWK - Kwacha", + "value": "MWK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LKR - Sri Lanka Rupee", + "value": "LKR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PKR - Pakistan Rupee", + "value": "PKR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HUF - Forint", + "value": "HUF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BMD - Bermudian Dollar", + "value": "BMD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LSL - Loti", + "value": "LSL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MNT - Tugrik", + "value": "MNT" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AMD - Armenian Dram", + "value": "AMD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UGX - Uganda Shilling", + "value": "UGX" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "QAR - Qatari Rial", + "value": "QAR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XDR - SDR (Special Drawing Right)", + "value": "XDR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JMD - Jamaican Dollar", + "value": "JMD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GEL - Lari", + "value": "GEL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SHP - Saint Helena Pound", + "value": "SHP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AFN - Afghani", + "value": "AFN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SBD - Solomon Islands Dollar", + "value": "SBD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KPW - North Korean Won", + "value": "KPW" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TRY - Turkish Lira", + "value": "TRY" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BDT - Taka", + "value": "BDT" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "YER - Yemeni Rial", + "value": "YER" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HTG - Gourde", + "value": "HTG" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XOF - CFA Franc BCEAO", + "value": "XOF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MGA - Malagasy Ariary", + "value": "MGA" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ANG - Netherlands Antillean Guilder", + "value": "ANG" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LRD - Liberian Dollar", + "value": "LRD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RWF - Rwanda Franc", + "value": "RWF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NOK - Norwegian Krone", + "value": "NOK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MOP - Pataca", + "value": "MOP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "INR - Indian Rupee", + "value": "INR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MXN - Mexican Peso", + "value": "MXN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CZK - Czech Koruna", + "value": "CZK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TJS - Somoni", + "value": "TJS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TWD - New Taiwan Dollar", + "value": "TWD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BTN - Ngultrum", + "value": "BTN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "COP - Colombian Peso", + "value": "COP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TMT - Turkmenistan New Manat", + "value": "TMT" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MUR - Mauritius Rupee", + "value": "MUR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IDR - Rupiah", + "value": "IDR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "HNL - Lempira", + "value": "HNL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XPF - CFP Franc", + "value": "XPF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "FJD - Fiji Dollar", + "value": "FJD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ETB - Ethiopian Birr", + "value": "ETB" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PEN - Nuevo Sol", + "value": "PEN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BZD - Belize Dollar", + "value": "BZD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ILS - New Israeli Sheqel", + "value": "ILS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "DOP - Dominican Peso", + "value": "DOP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GGP - Guernsey pound", + "value": "GGP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MDL - Moldovan Leu", + "value": "MDL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BSD - Bahamian Dollar", + "value": "BSD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SPL - Seborga Luigino", + "value": "SPL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SEK - Swedish Krona", + "value": "SEK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ZMK - Zambian Kwacha", + "value": "ZMK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JEP - Jersey pound", + "value": "JEP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AUD - Australian Dollar", + "value": "AUD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SRD - Surinam Dollar", + "value": "SRD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CUP - Cuban Peso", + "value": "CUP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BBD - Barbados Dollar", + "value": "BBD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KMF - Comoro Franc", + "value": "KMF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KRW - South Korean Won", + "value": "KRW" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GMD - Dalasi", + "value": "GMD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VEF - Bolivar ", + "value": "VEF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IMP - Isle of Man Pound", + "value": "IMP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CUC - Peso Convertible", + "value": "CUC" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TVD - Tuvalu Dollar", + "value": "TVD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CLP - Chilean Peso", + "value": "CLP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LTL - Lithuanian Litas", + "value": "LTL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CDF - Congolese Franc", + "value": "CDF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "XCD - East Caribbean Dollar", + "value": "XCD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KZT - Tenge", + "value": "KZT" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RUB - Russian Ruble", + "value": "RUB" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TTD - Trinidad and Tobago Dollar", + "value": "TTD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "OMR - Rial Omani", + "value": "OMR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BRL - Brazilian Real", + "value": "BRL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MMK - Kyat", + "value": "MMK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PLN - Zloty", + "value": "PLN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PYG - Guarani", + "value": "PYG" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KES - Kenyan Shilling", + "value": "KES" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SVC - El Salvador Colon", + "value": "SVC" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MKD - Denar", + "value": "MKD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "AZN - Azerbaijanian Manat", + "value": "AZN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TOP - Pa'anga", + "value": "TOP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "MVR - Rufiyaa", + "value": "MVR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "VUV - Vatu", + "value": "VUV" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GNF - Guinea Franc", + "value": "GNF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "WST - Tala", + "value": "WST" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IQD - Iraqi Dinar", + "value": "IQD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ERN - Nakfa", + "value": "ERN" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BAM - Convertible Mark", + "value": "BAM" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SCR - Seychelles Rupee", + "value": "SCR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CAD - Canadian Dollar", + "value": "CAD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CVE - Cape Verde Escudo", + "value": "CVE" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KWD - Kuwaiti Dinar", + "value": "KWD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BIF - Burundi Franc", + "value": "BIF" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "PGK - Kina", + "value": "PGK" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SOS - Somali Shilling", + "value": "SOS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SGD - Singapore Dollar", + "value": "SGD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "UZS - Uzbekistan Sum", + "value": "UZS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "STD - Dobra", + "value": "STD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "IRR - Iranian Rial", + "value": "IRR" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "CNY - Yuan Renminbi", + "value": "CNY" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SLL - Leone", + "value": "SLL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "TND - Tunisian Dinar", + "value": "TND" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GYD - Guyana Dollar", + "value": "GYD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "NZD - New Zealand Dollar", + "value": "NZD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "FKP - Falkland Islands Pound", + "value": "FKP" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "LVL - Latvian Lats", + "value": "LVL" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "USD - US Dollar", + "value": "USD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "KGS - Som", + "value": "KGS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "ARS - Argentine Peso", + "value": "ARS" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RON - New Romanian Leu", + "value": "RON" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "GTQ - Quetzal", + "value": "GTQ" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "RSD - Serbian Dinar", + "value": "RSD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "BHD - Bahraini Dinar", + "value": "BHD" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "JPY - Yen", + "value": "JPY" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "SDG - Sudanese Pound", + "value": "SDG" + } + ], + "predicate": "victim:revenue:iso_currency_code" + }, + { + "entry": [ + { + "expanded": "Misrepresentation", + "value": "Misrepresentation" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Modified stored data or content", + "value": "Modify data" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Created new user account", + "value": "Created account" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Deface content", + "value": "Defacement" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Log tampering or modification", + "value": "Log tampering" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Modified privileges or permissions", + "value": "Modify privileges" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Software installation or code modification", + "value": "Software installation" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Initiate fraudulent transaction", + "value": "Fraudulent transaction" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Influence or alter human behavior", + "value": "Alter behavior" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Hardware tampering or physical alteration", + "value": "Hardware tampering" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Modified configuration or services", + "value": "Modify configuration" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Repurposed asset for unauthorized function", + "value": "Repurpose" + } + ], + "predicate": "attribute:integrity:variety" + }, + { + "entry": [ + { + "expanded": "Customer", + "value": "Customer" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Patient", + "value": "Patient" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Student", + "value": "Student" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Employee", + "value": "Employee" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Partner", + "value": "Partner" + } + ], + "predicate": "attribute:confidentiality:data_victim" + }, + { + "entry": [ + { + "expanded": "Data stat not known", + "value": "Unknown" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Transmitted encrypted", + "value": "Transmitted encrypted" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Transmitted unencrypted", + "value": "Transmitted unencrypted" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Stored", + "value": "Stored" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Transmitted", + "value": "Transmitted" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Processed", + "value": "Processed" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Stored encrypted", + "value": "Stored encrypted" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Data state known but not listed.", + "value": "Other" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Stored unencrypted", + "value": "Stored unencrypted" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Data printed in human-readable format", + "value": "Printed" + } + ], + "predicate": "attribute:confidentiality:state" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:confidentiality:data_disclosure" + }, + { + "entry": [ + { + "expanded": "Yes (confirmed)", + "value": "Yes" + } + ], + "predicate": "attribute:confidentiality:data_disclosure" + }, + { + "entry": [ + { + "expanded": "Potentially (at risk)", + "value": "Potentially" + } + ], + "predicate": "attribute:confidentiality:data_disclosure" + }, + { + "entry": [ + { + "expanded": "No", + "value": "No" + } + ], + "predicate": "attribute:confidentiality:data_disclosure" + }, + { + "entry": [ + { + "expanded": "Acceleration", + "value": "Acceleration" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Interruption", + "value": "Interruption" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Loss", + "value": "Loss" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Performance degradation", + "value": "Degradation" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Conversion or obscuration", + "value": "Obscuration" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Destruction", + "value": "Destruction" + } + ], + "predicate": "attribute:availability:variety" + }, + { + "entry": [ + { + "expanded": "Remotely injected by agent (i.e. via SQLi)", + "value": "Remote injection" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Included in automated software update", + "value": "Software update" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Instant Messaging", + "value": "Instant messaging" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Email via user-executed attachment", + "value": "Email attachment" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Directly installed or inserted by threat agent (after system access)", + "value": "Direct install" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Downloaded and installed by local malware", + "value": "Download by malware" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Web via auto-executed or \"drive-by\" infection", + "value": "Web drive-by" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Email via embedded link", + "value": "Email link" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Network propagation", + "value": "Network propagation" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Email via automatic execution", + "value": "Email autoexecute" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Web via user-executed or downloaded content", + "value": "Web download" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Email but sub-variety (attachment, autoexecute, link, etc) not known", + "value": "Email unknown" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "Removable storage media or devices", + "value": "Removable media" + } + ], + "predicate": "action:malware:vector" + }, + { + "entry": [ + { + "expanded": "The malware action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:malware:result" + }, + { + "entry": [ + { + "expanded": "The malware action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:malware:result" + }, + { + "entry": [ + { + "expanded": "The malware action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:malware:result" + }, + { + "entry": [ + { + "expanded": "Malware which compromises a legitimate file rather than creating new filess", + "value": "Modify data" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Send spam", + "value": "Spam" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Packet sniffer (capture data from network)", + "value": "Packet sniffer" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Backdoor (enable remote access)", + "value": "Backdoor" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Exploit vulnerability in code (vs misconfig or weakness)", + "value": "Exploit vuln" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Password dumper (extract credential hashes)", + "value": "Password dumper" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Scan or footprint network", + "value": "Scan network" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Downloader (pull updates or other malware) ", + "value": "Downloader" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "System or network utilities (e.g., PsTools, Netcat)", + "value": "Adminware" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Click fraud or Bitcoin mining", + "value": "Click fraud" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Adware", + "value": "Adware" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Command and control (C2)", + "value": "C2" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Worm (propagate to other systems or devices)", + "value": "Worm" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Spyware, keylogger or form-grabber (capture user input or activity)", + "value": "Spyware/Keylogger" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Brute force attack", + "value": "Brute force" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Capture data from application or system process", + "value": "Capture app data" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Ram scraper or memory parser (capture data from volatile memory)", + "value": "Ram scraper" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Disable or interfere with security controls", + "value": "Disable controls" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Capture data stored on system disk", + "value": "Capture stored data" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Ransomware (encrypt or seize stored data)", + "value": "Ransomware" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Export data to another site or system", + "value": "Export data" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Client-side or browser attack (e.g., redirection, XSS, MitB)", + "value": "Client-side attack" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "SQL injection attack", + "value": "SQL injection" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Rootkit (maintain local privileges and stealth)", + "value": "Rootkit" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "Destroy or corrupt stored data", + "value": "Destroy data" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "DoS attack", + "value": "DoS" + } + ], + "predicate": "action:malware:variety" + }, + { + "entry": [ + { + "expanded": "The hacking action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:unknown:result" + }, + { + "entry": [ + { + "expanded": "The hacking action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:unknown:result" + }, + { + "entry": [ + { + "expanded": "The hacking action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:unknown:result" + }, + { + "entry": [ + { + "expanded": "The social action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:social:result" + }, + { + "entry": [ + { + "expanded": "The social action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:social:result" + }, + { + "entry": [ + { + "expanded": "The social action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:social:result" + }, + { + "entry": [ + { + "expanded": "In-person", + "value": "In-person" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Social media or networking", + "value": "Social media" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Documents", + "value": "Documents" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "SMS or texting", + "value": "SMS" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Phone", + "value": "Phone" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Website", + "value": "Website" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Instant messaging", + "value": "IM" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Removable storage media", + "value": "Removable media" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Email", + "value": "Email" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Software", + "value": "Software" + } + ], + "predicate": "action:social:vector" + }, + { + "entry": [ + { + "expanded": "Customer (B2C)", + "value": "Customer" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "End-user or regular employee", + "value": "End-user" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Human resources staff", + "value": "Human resources" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Finance or accounting staff", + "value": "Finance" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Helpdesk staff", + "value": "Helpdesk" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Executive or upper management", + "value": "Executive" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Cashier, teller or waiter", + "value": "Cashier" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Manager or supervisor", + "value": "Manager" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Former employee", + "value": "Former employee" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Security guard", + "value": "Guard" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Auditor", + "value": "Auditor" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Maintenance or janitorial staff", + "value": "Maintenance" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Call center staff", + "value": "Call center" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Partner (B2B)", + "value": "Partner" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "System or network administrator", + "value": "System admin" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Software developer", + "value": "Developer" + } + ], + "predicate": "action:social:target" + }, + { + "entry": [ + { + "expanded": "Online scam or hoax (e.g., scareware, 419 scam, auction fraud)", + "value": "Scam" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Phishing (or any type of *ishing)", + "value": "Phishing" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Elicitation (subtle extraction of info through conversation)", + "value": "Elicitation" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Spam (unsolicited or undesired email and advertisements)", + "value": "Spam" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Influence tactics (Leveraging authority or obligation, framing, etc)", + "value": "Influence" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Propaganda or disinformation", + "value": "Propaganda" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Forgery or counterfeiting (fake hardware, software, documents, etc)", + "value": "Forgery" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Bribery or solicitation", + "value": "Bribery" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Pretexting (dialogue leveraging invented scenario)", + "value": "Pretexting" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Extortion or blackmail", + "value": "Extortion" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Baiting (planting infected media)", + "value": "Baiting" + } + ], + "predicate": "action:social:variety" + }, + { + "entry": [ + { + "expanded": "Hazardous material", + "value": "Hazmat" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Extreme temperature", + "value": "Temperature" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Water leak", + "value": "Leak" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Hurricane", + "value": "Hurricane" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Ice and snow", + "value": "Ice" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Meteorite", + "value": "Meteorite" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Pathogen", + "value": "Pathogen" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Landslide", + "value": "Landslide" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Tornado", + "value": "Tornado" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Earthquake", + "value": "Earthquake" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Particulate matter (e.g., dust, smoke)", + "value": "Particulates" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Power failure or fluctuation", + "value": "Power failure" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Electromagnetic interference (EMI)", + "value": "EMI" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Humidity", + "value": "Humidity" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Tsunami", + "value": "Tsunami" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Electrostatic discharge (ESD)", + "value": "ESD" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Deterioration and degradation", + "value": "Deterioration" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Volcanic eruption", + "value": "Volcano" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Lightning", + "value": "Lightning" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Wind", + "value": "Wind" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Flood", + "value": "Flood" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Vermin", + "value": "Vermin" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Fire", + "value": "Fire" + } + ], + "predicate": "action:environmental:variety" + }, + { + "entry": [ + { + "expanded": "Random error (no reason, no fault)", + "value": "Random error" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Carelessness", + "value": "Carelessness" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Inadequate or insufficient processes", + "value": "Inadequate processes" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Inadequate or insufficient technology resources", + "value": "Inadequate technology" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Inadequate or insufficient personnel", + "value": "Inadequate personnel" + } + ], + "predicate": "action:error:vector" + }, + { + "entry": [ + { + "expanded": "Disposal error", + "value": "Disposal error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Omission (something intended, but not done)", + "value": "Omission" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Loss or misplacement", + "value": "Loss" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Maintenance error", + "value": "Maintenance error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Misinformation (unintentionally giving false info)", + "value": "Misinformation" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Physical accidents (e.g., drops, bumps, spills)", + "value": "Physical accidents" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Publishing error (private info to public doc or site)", + "value": "Publishing error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Technical malfunction or glitch", + "value": "Malfunction" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Poor capacity planning", + "value": "Capacity shortage" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Programming error (flaws or bugs in custom code)", + "value": "Programming error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Data entry error", + "value": "Data entry error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Gaffe (social or verbal slip)", + "value": "Gaffe" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Misconfiguration", + "value": "Misconfiguration" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Misdelivery (send wrong info or to wrong recipient)", + "value": "Misdelivery" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Classification or labeling error", + "value": "Classification error" + } + ], + "predicate": "action:error:variety" + }, + { + "entry": [ + { + "expanded": "Physical access within corporate facility", + "value": "Physical access" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "Remote access connection to corporate network (i.e. VPN)", + "value": "Remote access" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "Local network access within corporate facility", + "value": "LAN access" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "Non-corporate facilities or networks", + "value": "Non-corporate" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:misuse:vector" + }, + { + "entry": [ + { + "expanded": "The misuse action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:misuse:result" + }, + { + "entry": [ + { + "expanded": "The misuse action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:misuse:result" + }, + { + "entry": [ + { + "expanded": "The misuse action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:misuse:result" + }, + { + "entry": [ + { + "expanded": "Use of unapproved software or services", + "value": "Unapproved software" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Storage or distribution of illicit content", + "value": "Illicit content" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Unapproved workaround or shortcut", + "value": "Unapproved workaround" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Use of unapproved hardware or devices", + "value": "Unapproved hardware" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Inappropriate use of email or IM", + "value": "Email misuse" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Abuse of physical access to asset", + "value": "Possession abuse" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": " Other", + "value": "Other" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Inappropriate use of network or Web access", + "value": "Net misuse" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Handling of data in an unapproved manner", + "value": "Data mishandling" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Abuse of system access privileges", + "value": "Privilege abuse" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Abuse of private or entrusted knowledge", + "value": "Knowledge abuse" + } + ], + "predicate": "action:misuse:variety" + }, + { + "entry": [ + { + "expanded": "Physical access or connection (i.e., at keyboard or via cable) ", + "value": "Physical access" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Remote shell", + "value": "Command shell" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Superset of 'Desktop sharing' and '3rd party desktop'. Please use in place of the other two", + "value": "Desktop sharing software" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Backdoor or command and control channel", + "value": "Backdoor or C2" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Web application", + "value": "Web application" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Graphical desktop sharing (RDP, VNC, PCAnywhere, Citrix)", + "value": "Desktop sharing" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "3rd party online desktop sharing (LogMeIn, Go2Assist)", + "value": "3rd party desktop" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Partner connection or credential", + "value": "Partner" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "VPN", + "value": "VPN" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:hacking:vector" + }, + { + "entry": [ + { + "expanded": "The hacking action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:hacking:result" + }, + { + "entry": [ + { + "expanded": "The hacking action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:hacking:result" + }, + { + "entry": [ + { + "expanded": "The hacking action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:hacking:result" + }, + { + "entry": [ + { + "expanded": "Cross-site scripting", + "value": "XSS" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "HTTP Response Splitting", + "value": "HTTP Response Splitting" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Buffer overflow", + "value": "Buffer overflow" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Format string attack", + "value": "Format string attack" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "LDAP injection", + "value": "LDAP injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "SSI injection", + "value": "SSI injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Man-in-the-middle attack", + "value": "MitM" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Path traversal", + "value": "Path traversal" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "URL redirector abuse", + "value": "URL redirector abuse" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Use of Backdoor or C2 channel", + "value": "Use of backdoor or C2" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Mail command injection", + "value": "Mail command injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Virtual machine escape", + "value": "Virtual machine escape" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "OS commanding", + "value": "OS commanding" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Soap array abuse", + "value": "Soap array abuse" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Footprinting and fingerprinting", + "value": "Footprinting" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Cryptanalysis", + "value": "Cryptanalysis" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "SQL injection", + "value": "SQLi" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XML external entities", + "value": "XML external entities" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Abuse of functionality", + "value": "Abuse of functionality" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XML injection", + "value": "XML injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Routing detour", + "value": "Routing detour" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "HTTP response smuggling", + "value": "HTTP response smuggling" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Forced browsing or predictable resource location", + "value": "Forced browsing" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Cache poisoning", + "value": "Cache poisoning" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Null byte injection", + "value": "Null byte injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Reverse engineering", + "value": "Reverse engineering" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Brute force or password guessing attacks", + "value": "Brute force" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Fuzz testing", + "value": "Fuzz testing" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Offline password or key cracking (e.g., rainbow tables, Hashcat, JtR)", + "value": "Offline cracking" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Cross-site request forgery", + "value": "CSRF" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XML entity expansion", + "value": "XML entity expansion" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Remote file inclusion", + "value": "RFI" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Session fixation", + "value": "Session fixation" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Integer overflows", + "value": "Integer overflows" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XQuery injection", + "value": "XQuery injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Pass-the-hash", + "value": "Pass-the-hash" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XML attribute blowup", + "value": "XML attribute blowup" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Credential or session prediction", + "value": "Session prediction" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Use of stolen authentication credentials", + "value": "Use of stolen creds" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "HTTP request smuggling", + "value": "HTTP request smuggling" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "XPath injection", + "value": "XPath injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Denial of service", + "value": "DoS" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Special element injection", + "value": "Special element injection" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "HTTP request splitting", + "value": "HTTP request splitting" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Session replay", + "value": "Session replay" + } + ], + "predicate": "action:hacking:variety" + }, + { + "entry": [ + { + "expanded": "Personal vehicle", + "value": "Personal vehicle" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Given temporary visitor access", + "value": "Visitor privileges" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Public facility or area", + "value": "Public facility" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Victim outdoor grounds", + "value": "Victim grounds" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "The location was uncontrolled (public)", + "value": "Uncontrolled location" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Partner vehicle (e.g., delivery truck)", + "value": "Partner vehicle" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Victim private or work area (e.g., office space)", + "value": "Victim work area" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Victim high security area (e.g., server room, R&D labs)", + "value": "Victim secure area" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Partner facility or area", + "value": "Partner facility" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Personal residence", + "value": "Personal residence" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Public vehicle (e.g., plane, taxi)", + "value": "Public vehicle" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Victim public or customer area (e.g., lobby, storefront)", + "value": "Victim public area" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "Held privileged access to location", + "value": "Privileged access" + } + ], + "predicate": "action:physical:vector" + }, + { + "entry": [ + { + "expanded": "The physical action resulted in additional permissions", + "value": "Elevate" + } + ], + "predicate": "action:physical:result" + }, + { + "entry": [ + { + "expanded": "The physical action exfiltrated data from the victim", + "value": "Exfiltrate" + } + ], + "predicate": "action:physical:result" + }, + { + "entry": [ + { + "expanded": "The physical action infiltrated the victim", + "value": "Infiltrate" + } + ], + "predicate": "action:physical:result" + }, + { + "entry": [ + { + "expanded": "Installing card skimming device", + "value": "Skimmer" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Snooping (sneak about to gain info or access)", + "value": "Snooping" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Tampering (alter physical form or function)", + "value": "Tampering" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Theft (taking assets without permission)", + "value": "Theft" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Connection", + "value": "Connection" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Surveillance (monitoring and observation)", + "value": "Surveillance" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Assault (threats or acts of physical violence)", + "value": "Assault" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Wiretapping (Physical tap to comms line)", + "value": "Wiretapping" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Bypassed physical barriers or controls", + "value": "Bypassed controls" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Destruction (deliberate damaging or disabling)", + "value": "Destruction" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Disabled physical barriers or controls", + "value": "Disabled controls" + } + ], + "predicate": "action:physical:variety" + }, + { + "entry": [ + { + "expanded": "Source code", + "value": "Source code" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Personal or identifying information (e.g., addr, ID#, credit score)", + "value": "Personal" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Medical records", + "value": "Medical" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Classified information", + "value": "Classified" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "System information (e.g., config info, open services)", + "value": "System" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Digital certificate", + "value": "Digital certificate" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Trade secrets", + "value": "Secrets" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Sensitive internal data (e.g., plans, reports, emails)", + "value": "Internal" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Virtual currency", + "value": "Virtual currency" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Copyrighted material", + "value": "Copyrighted" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Authentication credentials (e.g., pwds, OTPs, biometrics)", + "value": "Credentials" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Other", + "value": "Other" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Payment card data (e.g., PAN, PIN, CVV2, Expiration)", + "value": "Payment" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Bank account data", + "value": "Bank" + } + ], + "predicate": "attribute:confidentiality:data:variety" + }, + { + "entry": [ + { + "expanded": "Never", + "value": "Never" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Seconds", + "value": "Seconds" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "NA", + "value": "NA" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Months", + "value": "Months" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Days", + "value": "Days" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Years", + "value": "Years" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Hours", + "value": "Hours" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Unknown", + "value": "Unknown" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Weeks", + "value": "Weeks" + } + ], + "predicate": "attribute:availability:duration:unit" + }, + { + "entry": [ + { + "expanded": "Minutes", + "value": "Minutes" + } + ], + "predicate": "attribute:availability:duration:unit" + } + ], + "version": 3, + "namespace": "veris", + "description": "Vocabulary for Event Recording and Incident Sharing (VERIS)" }