MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [mapping] updated to the latest version

pull/144/head
Alexandre Dulaunoy 2019-05-14 14:21:40 +02:00
parent a1818f5bff
commit da608c6cb7
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 1 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
mapping/mapping.json
View File

@ -3,9 +3,6 @@
"values": [ "values": [
"rsit:availability=\"dos\"", "rsit:availability=\"dos\"",
"rsit:availability=\"ddos\"", "rsit:availability=\"ddos\"",
"rsit:availability=\"misconfiguration\"",
"rsit:availability=\"sabotage\"",
"rsit:availability=\"outage\"",
"rsit:vulnerable=\"ddos-amplifier\"", "rsit:vulnerable=\"ddos-amplifier\"",
"ecsirt:availability=\"ddos\"", "ecsirt:availability=\"ddos\"",
"europol-incident:availability=\"dos-ddos\"", "europol-incident:availability=\"dos-ddos\"",
@ -32,13 +29,7 @@
}, },
"exploit": { "exploit": {
"values": [ "values": [
"rsit:intrusion-attempts=\"ids-alert\"",
"rsit:intrusion-attempts=\"exploit\"", "rsit:intrusion-attempts=\"exploit\"",
"rsit:intrusions=\"application-compromise\"",
"rsit:intrusions=\"burglary\"",
"rsit:vulnerable=\"weak-crypto\"",
"rsit:vulnerable=\"information-disclosure\"",
"rsit:vulnerable=\"vulnerable-system\"",
"veris:action:malware:variety=\"Exploit vuln\"", "veris:action:malware:variety=\"Exploit vuln\"",
"ecsirt:intrusion-attempts=\"exploit\"", "ecsirt:intrusion-attempts=\"exploit\"",
"europol-event:exploit", "europol-event:exploit",
@ -48,7 +39,6 @@
}, },
"malware": { "malware": {
"values": [ "values": [
"rsit:malicious-code=\"infected-system\"",
"rsit:malicious-code=\"malware-distribution\"", "rsit:malicious-code=\"malware-distribution\"",
"rsit:malicious-code=\"malware-configuration\"", "rsit:malicious-code=\"malware-configuration\"",
"ecsirt:malicious-code=\"malware\"", "ecsirt:malicious-code=\"malware\"",
@ -57,10 +47,6 @@
}, },
"Remote Access Tool": { "Remote Access Tool": {
"values": [ "values": [
"rsit:information-content-security=\"unauthorised-information-access\"",
"rsit:information-content-security=\"unauthorised-information-modification\"",
"rsit:information-content-security=\"data-loss\"",
"rsit:vulnerable=\"potentially-unwanted-accessible\"",
"enisa:nefarious-activity-abuse=\"remote-access-tool\"", "enisa:nefarious-activity-abuse=\"remote-access-tool\"",
"ms-caro-malware:malware-type=\"RemoteAccess\"" "ms-caro-malware:malware-type=\"RemoteAccess\""
] ]
@ -97,7 +83,6 @@
}, },
"scan network": { "scan network": {
"values": [ "values": [
"rsit:information-gathering=\"sniffing\"",
"veris:action:malware:variety=\"Scan network\"", "veris:action:malware:variety=\"Scan network\"",
"europol-event:network-scanning" "europol-event:network-scanning"
] ]
@ -111,7 +96,6 @@
"phishing": { "phishing": {
"values": [ "values": [
"rsit:fraud=\"phishing\"", "rsit:fraud=\"phishing\"",
"rsit:information-gathering=\"social-engineering\"",
"circl:incident-classification=\"phishing\"", "circl:incident-classification=\"phishing\"",
"ecsirt:fraud=\"phishing\"", "ecsirt:fraud=\"phishing\"",
"veris:action:social:variety=\"Phishing\"", "veris:action:social:variety=\"Phishing\"",
@ -130,8 +114,6 @@
}, },
"backdoor": { "backdoor": {
"values": [ "values": [
"rsit:intrusions=\"privileged-account-compromise\"",
"rsit:intrusions=\"unprivileged-account-compromise\"",
"ecsirt:intrusions=\"backdoor\"", "ecsirt:intrusions=\"backdoor\"",
"veris:action:malware:variety=\"Backdoor\"", "veris:action:malware:variety=\"Backdoor\"",
"ms-caro-malware:malware-type=\"Backdoor\"" "ms-caro-malware:malware-type=\"Backdoor\""
@ -156,7 +138,6 @@
}, },
"Adware": { "Adware": {
"values": [ "values": [
"rsit:fraud=\"unauthorized-use-of-resources\"",
"veris:action:malware:variety=\"Adware\"", "veris:action:malware:variety=\"Adware\"",
"malware_classification:malware-category=\"Adware\"", "malware_classification:malware-category=\"Adware\"",
"ms-caro-malware:malware-type=\"Adware\"" "ms-caro-malware:malware-type=\"Adware\""
@ -198,7 +179,7 @@
"ecsirt:malicious-code=\"worm\"" "ecsirt:malicious-code=\"worm\""
] ]
}, },
"Content": { "content": {
"values": [ "values": [
"rsit:abusive-content=\"harmful-speech\"", "rsit:abusive-content=\"harmful-speech\"",
"rsit:abusive-content=\"violence\"", "rsit:abusive-content=\"violence\"",