{ "description": "Vocabulary for Event Recording and Incident Sharing (VERIS)", "namespace": "veris", "version": 2, "values": [ { "predicate": "iso_currency_code", "entry": [ { "value": "DZD", "expanded": "DZD - Algerian Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NAD", "expanded": "NAD - Namibia Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GHS", "expanded": "GHS - Ghana Cedi" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "EGP", "expanded": "EGP - Egyptian Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BGN", "expanded": "BGN - Bulgarian Lev" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PAB", "expanded": "PAB - Balboa" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BOB", "expanded": "BOB - Boliviano" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "DKK", "expanded": "DKK - Danish Krone" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BWP", "expanded": "BWP - Pula" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LBP", "expanded": "LBP - Lebanese Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TZS", "expanded": "TZS - Tanzanian Shilling" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "VND", "expanded": "VND - Dong" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AOA", "expanded": "AOA - Kwanza" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KHR", "expanded": "KHR - Riel" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MYR", "expanded": "MYR - Malaysian Ringgit" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KYD", "expanded": "KYD - Cayman Islands Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LYD", "expanded": "LYD - Libyan Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "UAH", "expanded": "UAH - Hryvnia" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "JOD", "expanded": "JOD - Jordanian Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AWG", "expanded": "AWG - Aruban Florin" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SAR", "expanded": "SAR - Saudi Riyal" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "EUR", "expanded": "EUR - Euro" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "HKD", "expanded": "HKD - Hong Kong Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CHF", "expanded": "CHF - Swiss Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GIP", "expanded": "GIP - Gibraltar Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BYR", "expanded": "BYR - Belarussian Ruble" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ALL", "expanded": "ALL - Lek" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MRO", "expanded": "MRO - Ouguiya" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "HRK", "expanded": "HRK - Croatian Kuna" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "DJF", "expanded": "DJF - Djibouti Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SZL", "expanded": "SZL - Lilangeni" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "THB", "expanded": "THB - Baht" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "XAF", "expanded": "XAF - CFA Franc BEAC" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BND", "expanded": "BND - Brunei Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ISK", "expanded": "ISK - Iceland Krona" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "UYU", "expanded": "UYU - Peso Uruguayo" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NIO", "expanded": "NIO - Cordoba Oro" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LAK", "expanded": "LAK - Kip" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SYP", "expanded": "SYP - Syrian Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MAD", "expanded": "MAD - Moroccan Dirham" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MZN", "expanded": "MZN - Mozambique Metical" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PHP", "expanded": "PHP - Philippine Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ZAR", "expanded": "ZAR - South African Rand" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NPR", "expanded": "NPR - Nepalese Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NGN", "expanded": "NGN - Naira" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ZWD", "expanded": "ZWD - Zimbabwean Dollar A/06" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CRC", "expanded": "CRC - Costa Rican Colon" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AED", "expanded": "AED - UAE Dirham" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GBP", "expanded": "GBP - Pound Sterling" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MWK", "expanded": "MWK - Kwacha" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LKR", "expanded": "LKR - Sri Lanka Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PKR", "expanded": "PKR - Pakistan Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "HUF", "expanded": "HUF - Forint" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BMD", "expanded": "BMD - Bermudian Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LSL", "expanded": "LSL - Loti" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MNT", "expanded": "MNT - Tugrik" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AMD", "expanded": "AMD - Armenian Dram" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "UGX", "expanded": "UGX - Uganda Shilling" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "QAR", "expanded": "QAR - Qatari Rial" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "XDR", "expanded": "XDR - SDR (Special Drawing Right)" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "JMD", "expanded": "JMD - Jamaican Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GEL", "expanded": "GEL - Lari" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SHP", "expanded": "SHP - Saint Helena Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AFN", "expanded": "AFN - Afghani" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SBD", "expanded": "SBD - Solomon Islands Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KPW", "expanded": "KPW - North Korean Won" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TRY", "expanded": "TRY - Turkish Lira" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BDT", "expanded": "BDT - Taka" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "YER", "expanded": "YER - Yemeni Rial" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "HTG", "expanded": "HTG - Gourde" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "XOF", "expanded": "XOF - CFA Franc BCEAO" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MGA", "expanded": "MGA - Malagasy Ariary" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ANG", "expanded": "ANG - Netherlands Antillean Guilder" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LRD", "expanded": "LRD - Liberian Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "RWF", "expanded": "RWF - Rwanda Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NOK", "expanded": "NOK - Norwegian Krone" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MOP", "expanded": "MOP - Pataca" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "INR", "expanded": "INR - Indian Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MXN", "expanded": "MXN - Mexican Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CZK", "expanded": "CZK - Czech Koruna" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TJS", "expanded": "TJS - Somoni" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TWD", "expanded": "TWD - New Taiwan Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BTN", "expanded": "BTN - Ngultrum" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "COP", "expanded": "COP - Colombian Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TMT", "expanded": "TMT - Turkmenistan New Manat" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MUR", "expanded": "MUR - Mauritius Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "IDR", "expanded": "IDR - Rupiah" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "HNL", "expanded": "HNL - Lempira" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "XPF", "expanded": "XPF - CFP Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "FJD", "expanded": "FJD - Fiji Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ETB", "expanded": "ETB - Ethiopian Birr" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PEN", "expanded": "PEN - Nuevo Sol" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BZD", "expanded": "BZD - Belize Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ILS", "expanded": "ILS - New Israeli Sheqel" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "DOP", "expanded": "DOP - Dominican Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GGP", "expanded": "GGP - Guernsey pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MDL", "expanded": "MDL - Moldovan Leu" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BSD", "expanded": "BSD - Bahamian Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SPL", "expanded": "SPL - Seborga Luigino" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SEK", "expanded": "SEK - Swedish Krona" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ZMK", "expanded": "ZMK - Zambian Kwacha" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "JEP", "expanded": "JEP - Jersey pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AUD", "expanded": "AUD - Australian Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SRD", "expanded": "SRD - Surinam Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CUP", "expanded": "CUP - Cuban Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BBD", "expanded": "BBD - Barbados Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KMF", "expanded": "KMF - Comoro Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KRW", "expanded": "KRW - South Korean Won" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GMD", "expanded": "GMD - Dalasi" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "VEF", "expanded": "VEF - Bolivar " } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "IMP", "expanded": "IMP - Isle of Man Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CUC", "expanded": "CUC - Peso Convertible" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TVD", "expanded": "TVD - Tuvalu Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CLP", "expanded": "CLP - Chilean Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LTL", "expanded": "LTL - Lithuanian Litas" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CDF", "expanded": "CDF - Congolese Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "XCD", "expanded": "XCD - East Caribbean Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KZT", "expanded": "KZT - Tenge" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "RUB", "expanded": "RUB - Russian Ruble" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TTD", "expanded": "TTD - Trinidad and Tobago Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "OMR", "expanded": "OMR - Rial Omani" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BRL", "expanded": "BRL - Brazilian Real" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MMK", "expanded": "MMK - Kyat" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PLN", "expanded": "PLN - Zloty" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PYG", "expanded": "PYG - Guarani" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KES", "expanded": "KES - Kenyan Shilling" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SVC", "expanded": "SVC - El Salvador Colon" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MKD", "expanded": "MKD - Denar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "AZN", "expanded": "AZN - Azerbaijanian Manat" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TOP", "expanded": "TOP - Pa'anga" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "MVR", "expanded": "MVR - Rufiyaa" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "VUV", "expanded": "VUV - Vatu" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GNF", "expanded": "GNF - Guinea Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "WST", "expanded": "WST - Tala" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "IQD", "expanded": "IQD - Iraqi Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ERN", "expanded": "ERN - Nakfa" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BAM", "expanded": "BAM - Convertible Mark" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SCR", "expanded": "SCR - Seychelles Rupee" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CAD", "expanded": "CAD - Canadian Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CVE", "expanded": "CVE - Cape Verde Escudo" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KWD", "expanded": "KWD - Kuwaiti Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BIF", "expanded": "BIF - Burundi Franc" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "PGK", "expanded": "PGK - Kina" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SOS", "expanded": "SOS - Somali Shilling" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SGD", "expanded": "SGD - Singapore Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "UZS", "expanded": "UZS - Uzbekistan Sum" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "STD", "expanded": "STD - Dobra" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "IRR", "expanded": "IRR - Iranian Rial" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "CNY", "expanded": "CNY - Yuan Renminbi" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SLL", "expanded": "SLL - Leone" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "TND", "expanded": "TND - Tunisian Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GYD", "expanded": "GYD - Guyana Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "NZD", "expanded": "NZD - New Zealand Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "FKP", "expanded": "FKP - Falkland Islands Pound" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "LVL", "expanded": "LVL - Latvian Lats" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "USD", "expanded": "USD - US Dollar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "KGS", "expanded": "KGS - Som" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "ARS", "expanded": "ARS - Argentine Peso" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "RON", "expanded": "RON - New Romanian Leu" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "GTQ", "expanded": "GTQ - Quetzal" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "RSD", "expanded": "RSD - Serbian Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "BHD", "expanded": "BHD - Bahraini Dinar" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "JPY", "expanded": "JPY - Yen" } ] }, { "predicate": "iso_currency_code", "entry": [ { "value": "SDG", "expanded": "SDG - Sudanese Pound" } ] }, { "predicate": "confidence", "entry": [ { "value": "High", "expanded": "High confidence" } ] }, { "predicate": "confidence", "entry": [ { "value": "None", "expanded": "No confidence" } ] }, { "predicate": "confidence", "entry": [ { "value": "Medium", "expanded": "Medium confidence" } ] }, { "predicate": "confidence", "entry": [ { "value": "Low", "expanded": "Low confidence" } ] }, { "predicate": "targeted", "entry": [ { "value": "Targeted", "expanded": "Targeted: victim chosen as target then actor determined what weaknesses could be exploited" } ] }, { "predicate": "targeted", "entry": [ { "value": "NA", "expanded": "Not applicable" } ] }, { "predicate": "targeted", "entry": [ { "value": "Opportunistic", "expanded": "Opportunistic: victim attacked because they exhibited a weakness the actor knew how to exploit" } ] }, { "predicate": "targeted", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - financial audit", "expanded": "Internal - financial audit and reconciliation process" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - found documents", "expanded": "External - Found documents" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - audit", "expanded": "External - security audit or scan" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - incident response", "expanded": "External - Notified while investigating another incident" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - unknown", "expanded": "External - unknown" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - NIDS", "expanded": "Internal - network IDS or IPS alert" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - emergency response team", "expanded": "External - Emergency response team" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - fraud detection", "expanded": "External - fraud detection (e.g., CPP)" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - incident response", "expanded": "Internal - discovered while responding to another (separate) incident" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - customer", "expanded": "External - reported by customer or partner affected by the incident" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - audit", "expanded": "Partner - Audit performed by a partner organization" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - IT review", "expanded": "Internal - Informal IT review" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - log review", "expanded": "Internal - log review process or SIEM" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - unknown", "expanded": "Internal - unknown" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - suspicious traffic", "expanded": "External - Report of suspicious traffic" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - HIDS", "expanded": "Internal - host IDS or file integrity monitoring" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - Other", "expanded": "Partner - Other" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - monitoring service", "expanded": "External - managed security event monitoring service" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - antivirus", "expanded": "Partner - Notified by antivirus company but not through AV product" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - Unknown", "expanded": "Partner - Unknown" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - security alarm", "expanded": "Internal - physical security system alarm" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - law enforcement", "expanded": "Internal - notified by law enforcement or government agency" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - antivirus", "expanded": "Internal - antivirus alert" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - infrastructure monitoring", "expanded": "Internal - Infrastructure monitoring" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - incident response", "expanded": "Partner - notified while investigating another incident" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - data loss prevention", "expanded": "Internal - Data loss prevention software" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - fraud detection", "expanded": "Internal - fraud detection mechanism" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Prt - monitoring service", "expanded": "Partner - Reported by a monitoring service" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Int - reported by employee", "expanded": "Internal - reported by employee who saw something odd" } ] }, { "predicate": "discovery_method", "entry": [ { "value": "Ext - actor disclosure", "expanded": "External - disclosed by threat agent (e.g., public brag, private blackmail)" } ] }, { "predicate": "cost_corrective_action", "entry": [ { "value": "Simple and cheap", "expanded": "Simple and cheap" } ] }, { "predicate": "cost_corrective_action", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "cost_corrective_action", "entry": [ { "value": "Something in-between", "expanded": "Something in-between" } ] }, { "predicate": "cost_corrective_action", "entry": [ { "value": "Difficult and expensive", "expanded": "Difficult and expensive" } ] }, { "predicate": "security_incident", "entry": [ { "value": "Suspected", "expanded": "Suspected" } ] }, { "predicate": "security_incident", "entry": [ { "value": "Confirmed", "expanded": "Yes - Confirmed" } ] }, { "predicate": "security_incident", "entry": [ { "value": "Near miss", "expanded": "Near miss (actions did not compromise asset)" } ] }, { "predicate": "security_incident", "entry": [ { "value": "False positive", "expanded": "False positive (response triggered, but no incident)" } ] }, { "predicate": "country", "entry": [ { "value": "BD", "expanded": "Bangladesh" } ] }, { "predicate": "country", "entry": [ { "value": "BE", "expanded": "Belgium" } ] }, { "predicate": "country", "entry": [ { "value": "BF", "expanded": "Burkina Faso" } ] }, { "predicate": "country", "entry": [ { "value": "BG", "expanded": "Bulgaria" } ] }, { "predicate": "country", "entry": [ { "value": "BA", "expanded": "Bosnia and Herzegovina" } ] }, { "predicate": "country", "entry": [ { "value": "BB", "expanded": "Barbados" } ] }, { "predicate": "country", "entry": [ { "value": "WF", "expanded": "Wallis and Futuna Islands" } ] }, { "predicate": "country", "entry": [ { "value": "BL", "expanded": "Saint-Barthelemy" } ] }, { "predicate": "country", "entry": [ { "value": "BM", "expanded": "Bermuda" } ] }, { "predicate": "country", "entry": [ { "value": "BN", "expanded": "Brunei Darussalam" } ] }, { "predicate": "country", "entry": [ { "value": "BO", "expanded": "Bolivia" } ] }, { "predicate": "country", "entry": [ { "value": "BH", "expanded": "Bahrain" } ] }, { "predicate": "country", "entry": [ { "value": "BI", "expanded": "Burundi" } ] }, { "predicate": "country", "entry": [ { "value": "BJ", "expanded": "Benin" } ] }, { "predicate": "country", "entry": [ { "value": "BT", "expanded": "Bhutan" } ] }, { "predicate": "country", "entry": [ { "value": "JM", "expanded": "Jamaica" } ] }, { "predicate": "country", "entry": [ { "value": "BV", "expanded": "Bouvet Island" } ] }, { "predicate": "country", "entry": [ { "value": "BW", "expanded": "Botswana" } ] }, { "predicate": "country", "entry": [ { "value": "WS", "expanded": "Samoa" } ] }, { "predicate": "country", "entry": [ { "value": "BQ", "expanded": "Bonaire, Saint Eustatius and Saba" } ] }, { "predicate": "country", "entry": [ { "value": "BR", "expanded": "Brazil" } ] }, { "predicate": "country", "entry": [ { "value": "BS", "expanded": "Bahamas" } ] }, { "predicate": "country", "entry": [ { "value": "JE", "expanded": "Jersey" } ] }, { "predicate": "country", "entry": [ { "value": "BY", "expanded": "Belarus" } ] }, { "predicate": "country", "entry": [ { "value": "BZ", "expanded": "Belize" } ] }, { "predicate": "country", "entry": [ { "value": "RU", "expanded": "Russian Federation" } ] }, { "predicate": "country", "entry": [ { "value": "RW", "expanded": "Rwanda" } ] }, { "predicate": "country", "entry": [ { "value": "RS", "expanded": "Serbia" } ] }, { "predicate": "country", "entry": [ { "value": "TL", "expanded": "Timor-Leste" } ] }, { "predicate": "country", "entry": [ { "value": "RE", "expanded": "Reunion" } ] }, { "predicate": "country", "entry": [ { "value": "TM", "expanded": "Turkmenistan" } ] }, { "predicate": "country", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "country", "entry": [ { "value": "TJ", "expanded": "Tajikistan" } ] }, { "predicate": "country", "entry": [ { "value": "RO", "expanded": "Romania" } ] }, { "predicate": "country", "entry": [ { "value": "TK", "expanded": "Tokelau" } ] }, { "predicate": "country", "entry": [ { "value": "GW", "expanded": "Guinea-Bissau" } ] }, { "predicate": "country", "entry": [ { "value": "GU", "expanded": "Guam" } ] }, { "predicate": "country", "entry": [ { "value": "GT", "expanded": "Guatemala" } ] }, { "predicate": "country", "entry": [ { "value": "GS", "expanded": "South Georgia and the South Sandwich Islands" } ] }, { "predicate": "country", "entry": [ { "value": "GR", "expanded": "Greece" } ] }, { "predicate": "country", "entry": [ { "value": "GQ", "expanded": "Equatorial Guinea" } ] }, { "predicate": "country", "entry": [ { "value": "GP", "expanded": "Guadeloupe" } ] }, { "predicate": "country", "entry": [ { "value": "JP", "expanded": "Japan" } ] }, { "predicate": "country", "entry": [ { "value": "GY", "expanded": "Guyana" } ] }, { "predicate": "country", "entry": [ { "value": "GG", "expanded": "Guernsey" } ] }, { "predicate": "country", "entry": [ { "value": "GF", "expanded": "French Guiana" } ] }, { "predicate": "country", "entry": [ { "value": "GE", "expanded": "Georgia" } ] }, { "predicate": "country", "entry": [ { "value": "GD", "expanded": "Grenada" } ] }, { "predicate": "country", "entry": [ { "value": "GB", "expanded": "United Kingdom" } ] }, { "predicate": "country", "entry": [ { "value": "GA", "expanded": "Gabon" } ] }, { "predicate": "country", "entry": [ { "value": "SV", "expanded": "El Salvador" } ] }, { "predicate": "country", "entry": [ { "value": "GN", "expanded": "Guinea" } ] }, { "predicate": "country", "entry": [ { "value": "GM", "expanded": "Gambia" } ] }, { "predicate": "country", "entry": [ { "value": "GL", "expanded": "Greenland" } ] }, { "predicate": "country", "entry": [ { "value": "GI", "expanded": "Gibraltar" } ] }, { "predicate": "country", "entry": [ { "value": "GH", "expanded": "Ghana" } ] }, { "predicate": "country", "entry": [ { "value": "OM", "expanded": "Oman" } ] }, { "predicate": "country", "entry": [ { "value": "TN", "expanded": "Tunisia" } ] }, { "predicate": "country", "entry": [ { "value": "JO", "expanded": "Jordan" } ] }, { "predicate": "country", "entry": [ { "value": "HR", "expanded": "Croatia" } ] }, { "predicate": "country", "entry": [ { "value": "HT", "expanded": "Haiti" } ] }, { "predicate": "country", "entry": [ { "value": "HU", "expanded": "Hungary" } ] }, { "predicate": "country", "entry": [ { "value": "HK", "expanded": "Hong Kong" } ] }, { "predicate": "country", "entry": [ { "value": "HN", "expanded": "Honduras" } ] }, { "predicate": "country", "entry": [ { "value": "HM", "expanded": "Heard Island and McDonal Islands" } ] }, { "predicate": "country", "entry": [ { "value": "VE", "expanded": "Venezuela (Bolivarian Republic of)" } ] }, { "predicate": "country", "entry": [ { "value": "PR", "expanded": "Puerto Rico" } ] }, { "predicate": "country", "entry": [ { "value": "PS", "expanded": "Palestinian Territory, Occupied" } ] }, { "predicate": "country", "entry": [ { "value": "PW", "expanded": "Palau" } ] }, { "predicate": "country", "entry": [ { "value": "PT", "expanded": "Portugal" } ] }, { "predicate": "country", "entry": [ { "value": "SJ", "expanded": "Svalbard and Jan Mayen Islands" } ] }, { "predicate": "country", "entry": [ { "value": "PY", "expanded": "Paraguay" } ] }, { "predicate": "country", "entry": [ { "value": "IQ", "expanded": "Iraq" } ] }, { "predicate": "country", "entry": [ { "value": "PA", "expanded": "Panama" } ] }, { "predicate": "country", "entry": [ { "value": "PF", "expanded": "French Polynesia" } ] }, { "predicate": "country", "entry": [ { "value": "PG", "expanded": "Papua New Guinea" } ] }, { "predicate": "country", "entry": [ { "value": "PE", "expanded": "Peru" } ] }, { "predicate": "country", "entry": [ { "value": "PK", "expanded": "Pakistan" } ] }, { "predicate": "country", "entry": [ { "value": "PH", "expanded": "Philippines" } ] }, { "predicate": "country", "entry": [ { "value": "PN", "expanded": "Pitcairn" } ] }, { "predicate": "country", "entry": [ { "value": "PL", "expanded": "Poland" } ] }, { "predicate": "country", "entry": [ { "value": "PM", "expanded": "Saint Pierre and Miquelon" } ] }, { "predicate": "country", "entry": [ { "value": "ZM", "expanded": "Zambia" } ] }, { "predicate": "country", "entry": [ { "value": "EH", "expanded": "Western Sahara" } ] }, { "predicate": "country", "entry": [ { "value": "EE", "expanded": "Estonia" } ] }, { "predicate": "country", "entry": [ { "value": "EG", "expanded": "Egypt" } ] }, { "predicate": "country", "entry": [ { "value": "ZA", "expanded": "South Africa" } ] }, { "predicate": "country", "entry": [ { "value": "EC", "expanded": "Ecuador" } ] }, { "predicate": "country", "entry": [ { "value": "IT", "expanded": "Italy" } ] }, { "predicate": "country", "entry": [ { "value": "VN", "expanded": "Viet Nam" } ] }, { "predicate": "country", "entry": [ { "value": "SB", "expanded": "Solomon Islands" } ] }, { "predicate": "country", "entry": [ { "value": "ET", "expanded": "Ethiopia" } ] }, { "predicate": "country", "entry": [ { "value": "SO", "expanded": "Somalia" } ] }, { "predicate": "country", "entry": [ { "value": "ZW", "expanded": "Zimbabwe" } ] }, { "predicate": "country", "entry": [ { "value": "SA", "expanded": "Saudi Arabia" } ] }, { "predicate": "country", "entry": [ { "value": "ES", "expanded": "Spain" } ] }, { "predicate": "country", "entry": [ { "value": "ER", "expanded": "Eritrea" } ] }, { "predicate": "country", "entry": [ { "value": "ME", "expanded": "Montenegro" } ] }, { "predicate": "country", "entry": [ { "value": "MD", "expanded": "Moldova, Republic of" } ] }, { "predicate": "country", "entry": [ { "value": "MG", "expanded": "Madagascar" } ] }, { "predicate": "country", "entry": [ { "value": "MF", "expanded": "Saint Martin (French part)" } ] }, { "predicate": "country", "entry": [ { "value": "MA", "expanded": "Morocco" } ] }, { "predicate": "country", "entry": [ { "value": "MC", "expanded": "Monaco" } ] }, { "predicate": "country", "entry": [ { "value": "UZ", "expanded": "Uzbekistan" } ] }, { "predicate": "country", "entry": [ { "value": "MM", "expanded": "Myanmar" } ] }, { "predicate": "country", "entry": [ { "value": "ML", "expanded": "Mali" } ] }, { "predicate": "country", "entry": [ { "value": "MO", "expanded": "Macao" } ] }, { "predicate": "country", "entry": [ { "value": "MN", "expanded": "Mongolia" } ] }, { "predicate": "country", "entry": [ { "value": "MH", "expanded": "Marshall Islands" } ] }, { "predicate": "country", "entry": [ { "value": "MK", "expanded": "Macedonia, The former Yugoslav Republic of" } ] }, { "predicate": "country", "entry": [ { "value": "MU", "expanded": "Mauritius" } ] }, { "predicate": "country", "entry": [ { "value": "MT", "expanded": "Malta" } ] }, { "predicate": "country", "entry": [ { "value": "MW", "expanded": "Malawi" } ] }, { "predicate": "country", "entry": [ { "value": "MV", "expanded": "Maldives" } ] }, { "predicate": "country", "entry": [ { "value": "MQ", "expanded": "Martinique" } ] }, { "predicate": "country", "entry": [ { "value": "MP", "expanded": "Northern Mariana Islands" } ] }, { "predicate": "country", "entry": [ { "value": "MS", "expanded": "Montserrat" } ] }, { "predicate": "country", "entry": [ { "value": "MR", "expanded": "Mauritania" } ] }, { "predicate": "country", "entry": [ { "value": "IM", "expanded": "Isle of Man" } ] }, { "predicate": "country", "entry": [ { "value": "UG", "expanded": "Uganda" } ] }, { "predicate": "country", "entry": [ { "value": "TZ", "expanded": "Tanzania, United Republic of" } ] }, { "predicate": "country", "entry": [ { "value": "MY", "expanded": "Malaysia" } ] }, { "predicate": "country", "entry": [ { "value": "MX", "expanded": "Mexico" } ] }, { "predicate": "country", "entry": [ { "value": "IL", "expanded": "Israel" } ] }, { "predicate": "country", "entry": [ { "value": "FR", "expanded": "France" } ] }, { "predicate": "country", "entry": [ { "value": "IO", "expanded": "British Virgin Islands" } ] }, { "predicate": "country", "entry": [ { "value": "SH", "expanded": "Saint Helena" } ] }, { "predicate": "country", "entry": [ { "value": "FI", "expanded": "Finland" } ] }, { "predicate": "country", "entry": [ { "value": "FJ", "expanded": "Fiji" } ] }, { "predicate": "country", "entry": [ { "value": "FK", "expanded": "Faeroe Islands" } ] }, { "predicate": "country", "entry": [ { "value": "FM", "expanded": "Micronesia (Federated States of)" } ] }, { "predicate": "country", "entry": [ { "value": "FO", "expanded": "Falkland Islands (Malvinas)" } ] }, { "predicate": "country", "entry": [ { "value": "NI", "expanded": "Nicaragua" } ] }, { "predicate": "country", "entry": [ { "value": "NL", "expanded": "Netherlands" } ] }, { "predicate": "country", "entry": [ { "value": "NO", "expanded": "Norway" } ] }, { "predicate": "country", "entry": [ { "value": "NA", "expanded": "Namibia" } ] }, { "predicate": "country", "entry": [ { "value": "VU", "expanded": "Vanuatu" } ] }, { "predicate": "country", "entry": [ { "value": "NC", "expanded": "New Caledonia" } ] }, { "predicate": "country", "entry": [ { "value": "NE", "expanded": "Niger" } ] }, { "predicate": "country", "entry": [ { "value": "NF", "expanded": "Norfolk Island" } ] }, { "predicate": "country", "entry": [ { "value": "NG", "expanded": "Nigeria" } ] }, { "predicate": "country", "entry": [ { "value": "NZ", "expanded": "New Zealand" } ] }, { "predicate": "country", "entry": [ { "value": "NP", "expanded": "Nepal" } ] }, { "predicate": "country", "entry": [ { "value": "NR", "expanded": "Nauru" } ] }, { "predicate": "country", "entry": [ { "value": "NU", "expanded": "Niue" } ] }, { "predicate": "country", "entry": [ { "value": "CK", "expanded": "Cook Islands" } ] }, { "predicate": "country", "entry": [ { "value": "CI", "expanded": "Cote d'Ivoire" } ] }, { "predicate": "country", "entry": [ { "value": "CH", "expanded": "Switzerland" } ] }, { "predicate": "country", "entry": [ { "value": "CO", "expanded": "Colombia" } ] }, { "predicate": "country", "entry": [ { "value": "CN", "expanded": "China" } ] }, { "predicate": "country", "entry": [ { "value": "CM", "expanded": "Cameroon" } ] }, { "predicate": "country", "entry": [ { "value": "CL", "expanded": "Chile" } ] }, { "predicate": "country", "entry": [ { "value": "CC", "expanded": "Cocos (Keeling) Islands" } ] }, { "predicate": "country", "entry": [ { "value": "CA", "expanded": "Canada" } ] }, { "predicate": "country", "entry": [ { "value": "CG", "expanded": "Congo" } ] }, { "predicate": "country", "entry": [ { "value": "CF", "expanded": "Central African Republic" } ] }, { "predicate": "country", "entry": [ { "value": "CD", "expanded": "Congo, Democratic Republic of the" } ] }, { "predicate": "country", "entry": [ { "value": "CZ", "expanded": "Czech Republic" } ] }, { "predicate": "country", "entry": [ { "value": "CY", "expanded": "Cyprus" } ] }, { "predicate": "country", "entry": [ { "value": "CX", "expanded": "Christmas Island" } ] }, { "predicate": "country", "entry": [ { "value": "CR", "expanded": "Costa Rica" } ] }, { "predicate": "country", "entry": [ { "value": "CW", "expanded": "Curacao" } ] }, { "predicate": "country", "entry": [ { "value": "CV", "expanded": "Cape Verde" } ] }, { "predicate": "country", "entry": [ { "value": "CU", "expanded": "Cuba" } ] }, { "predicate": "country", "entry": [ { "value": "SZ", "expanded": "Swaziland" } ] }, { "predicate": "country", "entry": [ { "value": "SY", "expanded": "Syrian Arab Republic" } ] }, { "predicate": "country", "entry": [ { "value": "SX", "expanded": "Sint Maarten (Dutch part)" } ] }, { "predicate": "country", "entry": [ { "value": "KG", "expanded": "Kyrgyzstan" } ] }, { "predicate": "country", "entry": [ { "value": "KE", "expanded": "Kenya" } ] }, { "predicate": "country", "entry": [ { "value": "SS", "expanded": "South Sudan" } ] }, { "predicate": "country", "entry": [ { "value": "SR", "expanded": "Suriname" } ] }, { "predicate": "country", "entry": [ { "value": "KI", "expanded": "Kiribati" } ] }, { "predicate": "country", "entry": [ { "value": "KH", "expanded": "Cambodia" } ] }, { "predicate": "country", "entry": [ { "value": "KN", "expanded": "Saint Kitts and Nevis" } ] }, { "predicate": "country", "entry": [ { "value": "KM", "expanded": "Comoros" } ] }, { "predicate": "country", "entry": [ { "value": "ST", "expanded": "Sao Tome and Principe" } ] }, { "predicate": "country", "entry": [ { "value": "SK", "expanded": "Slovakia" } ] }, { "predicate": "country", "entry": [ { "value": "KR", "expanded": "Korea, Republic of" } ] }, { "predicate": "country", "entry": [ { "value": "SI", "expanded": "Slovenia" } ] }, { "predicate": "country", "entry": [ { "value": "KP", "expanded": "Korea, Democratic People's Republic of" } ] }, { "predicate": "country", "entry": [ { "value": "KW", "expanded": "Kuwait" } ] }, { "predicate": "country", "entry": [ { "value": "SN", "expanded": "Senegal" } ] }, { "predicate": "country", "entry": [ { "value": "SM", "expanded": "San Marino" } ] }, { "predicate": "country", "entry": [ { "value": "SL", "expanded": "Sierra Leone" } ] }, { "predicate": "country", "entry": [ { "value": "SC", "expanded": "Seychelles" } ] }, { "predicate": "country", "entry": [ { "value": "KZ", "expanded": "Kazakhstan" } ] }, { "predicate": "country", "entry": [ { "value": "KY", "expanded": "Cayman Islands" } ] }, { "predicate": "country", "entry": [ { "value": "SG", "expanded": "Singapore" } ] }, { "predicate": "country", "entry": [ { "value": "SE", "expanded": "Sweden" } ] }, { "predicate": "country", "entry": [ { "value": "SD", "expanded": "Sudan" } ] }, { "predicate": "country", "entry": [ { "value": "DO", "expanded": "Dominican Republic" } ] }, { "predicate": "country", "entry": [ { "value": "DM", "expanded": "Dominica" } ] }, { "predicate": "country", "entry": [ { "value": "DJ", "expanded": "Djibouti" } ] }, { "predicate": "country", "entry": [ { "value": "DK", "expanded": "Denmark" } ] }, { "predicate": "country", "entry": [ { "value": "VG", "expanded": "British Virgin Islands" } ] }, { "predicate": "country", "entry": [ { "value": "DE", "expanded": "Germany" } ] }, { "predicate": "country", "entry": [ { "value": "YE", "expanded": "Yemen" } ] }, { "predicate": "country", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "country", "entry": [ { "value": "DZ", "expanded": "Algeria" } ] }, { "predicate": "country", "entry": [ { "value": "US", "expanded": "United States of America" } ] }, { "predicate": "country", "entry": [ { "value": "UY", "expanded": "Uruguay" } ] }, { "predicate": "country", "entry": [ { "value": "YT", "expanded": "Mayotte" } ] }, { "predicate": "country", "entry": [ { "value": "UM", "expanded": "United States Minor Outlying Islands" } ] }, { "predicate": "country", "entry": [ { "value": "LB", "expanded": "Lebanon" } ] }, { "predicate": "country", "entry": [ { "value": "LC", "expanded": "Saint Lucia" } ] }, { "predicate": "country", "entry": [ { "value": "LA", "expanded": "Lao People's Democratic Republic" } ] }, { "predicate": "country", "entry": [ { "value": "TV", "expanded": "Tuvalu" } ] }, { "predicate": "country", "entry": [ { "value": "TW", "expanded": "Taiwan, Province of China" } ] }, { "predicate": "country", "entry": [ { "value": "TT", "expanded": "Trinidad and Tobago" } ] }, { "predicate": "country", "entry": [ { "value": "TR", "expanded": "Turkey" } ] }, { "predicate": "country", "entry": [ { "value": "LK", "expanded": "Sri Lanka" } ] }, { "predicate": "country", "entry": [ { "value": "LI", "expanded": "Liechtenstein" } ] }, { "predicate": "country", "entry": [ { "value": "LV", "expanded": "Latvia" } ] }, { "predicate": "country", "entry": [ { "value": "TO", "expanded": "Tonga" } ] }, { "predicate": "country", "entry": [ { "value": "LT", "expanded": "Lithuania" } ] }, { "predicate": "country", "entry": [ { "value": "LU", "expanded": "Luxembourg" } ] }, { "predicate": "country", "entry": [ { "value": "LR", "expanded": "Liberia" } ] }, { "predicate": "country", "entry": [ { "value": "LS", "expanded": "Lesotho" } ] }, { "predicate": "country", "entry": [ { "value": "TH", "expanded": "Thailand" } ] }, { "predicate": "country", "entry": [ { "value": "TF", "expanded": "French Southern Territories" } ] }, { "predicate": "country", "entry": [ { "value": "TG", "expanded": "Togo" } ] }, { "predicate": "country", "entry": [ { "value": "TD", "expanded": "Chad" } ] }, { "predicate": "country", "entry": [ { "value": "TC", "expanded": "Turks and Caicos Islands" } ] }, { "predicate": "country", "entry": [ { "value": "LY", "expanded": "Libya" } ] }, { "predicate": "country", "entry": [ { "value": "VA", "expanded": "Holy See" } ] }, { "predicate": "country", "entry": [ { "value": "VC", "expanded": "Saint Vincent and the Grenadines" } ] }, { "predicate": "country", "entry": [ { "value": "AE", "expanded": "United Arab Emirates" } ] }, { "predicate": "country", "entry": [ { "value": "AD", "expanded": "Andorra" } ] }, { "predicate": "country", "entry": [ { "value": "AG", "expanded": "Antigua and Barbuda" } ] }, { "predicate": "country", "entry": [ { "value": "AF", "expanded": "Afghanistan" } ] }, { "predicate": "country", "entry": [ { "value": "AI", "expanded": "Anguilla" } ] }, { "predicate": "country", "entry": [ { "value": "VI", "expanded": "United States Virgin Islands" } ] }, { "predicate": "country", "entry": [ { "value": "IS", "expanded": "Iceland" } ] }, { "predicate": "country", "entry": [ { "value": "IR", "expanded": "Iran (Islamic Republic of)" } ] }, { "predicate": "country", "entry": [ { "value": "AM", "expanded": "Armenia" } ] }, { "predicate": "country", "entry": [ { "value": "AL", "expanded": "Albania" } ] }, { "predicate": "country", "entry": [ { "value": "AO", "expanded": "Angola" } ] }, { "predicate": "country", "entry": [ { "value": "AQ", "expanded": "Antarctica" } ] }, { "predicate": "country", "entry": [ { "value": "AS", "expanded": "American Samoa" } ] }, { "predicate": "country", "entry": [ { "value": "AR", "expanded": "Argentina" } ] }, { "predicate": "country", "entry": [ { "value": "AU", "expanded": "Australia" } ] }, { "predicate": "country", "entry": [ { "value": "AT", "expanded": "Austria" } ] }, { "predicate": "country", "entry": [ { "value": "AW", "expanded": "Aruba" } ] }, { "predicate": "country", "entry": [ { "value": "IN", "expanded": "India" } ] }, { "predicate": "country", "entry": [ { "value": "AX", "expanded": "Aland Islands" } ] }, { "predicate": "country", "entry": [ { "value": "AZ", "expanded": "Azerbaijan" } ] }, { "predicate": "country", "entry": [ { "value": "IE", "expanded": "Ireland" } ] }, { "predicate": "country", "entry": [ { "value": "ID", "expanded": "Indonesia" } ] }, { "predicate": "country", "entry": [ { "value": "UA", "expanded": "Ukraine" } ] }, { "predicate": "country", "entry": [ { "value": "QA", "expanded": "Qatar" } ] }, { "predicate": "country", "entry": [ { "value": "MZ", "expanded": "Mozambique" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Insignificant", "expanded": "Insignificant: Impact absorbed by normal activities" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Catastrophic", "expanded": "Catastrophic: A business-ending event (don't choose this if the victim will continue operations)" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Distracting", "expanded": "Distracting: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Damaging", "expanded": "Damaging: Real and serious effect on the \"bottom line\" and/or long-term ability to generate revenue" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "impact:overall_rating", "entry": [ { "value": "Painful", "expanded": "Painful: Limited \"hard costs\", but impact felt through having to deal with the incident rather than conducting normal duties" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Grudge", "expanded": "Grudge or personal offense" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Financial", "expanded": "Financial or personal gain" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "NA", "expanded": "Not Applicable (unintentional action)" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Ideology", "expanded": "Ideology or protest" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Convenience", "expanded": "Convenience of expediency" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Fun", "expanded": "Fun, curiosity, or pride" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Fear", "expanded": "Fear or duress" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Espionage", "expanded": "Espionage or competitive advantage" } ] }, { "predicate": "actor:motive", "entry": [ { "value": "Secondary", "expanded": "Aid in a different attack" } ] }, { "predicate": "asset:management", "entry": [ { "value": "NA", "expanded": "Not applicable" } ] }, { "predicate": "asset:management", "entry": [ { "value": "Internal", "expanded": "Internally managed" } ] }, { "predicate": "asset:management", "entry": [ { "value": "External", "expanded": "Externally managed" } ] }, { "predicate": "asset:management", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Flash drive", "expanded": "Media - Flash drive or card" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Print", "expanded": "Server - Print" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Guard", "expanded": "People - Guard" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Database", "expanded": "Server - Database" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - PBX", "expanded": "Network - Private branch exchange (PBX)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Other", "expanded": "Media - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Other", "expanded": "Server - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - System admin", "expanded": "People - Administrator" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - POS controller", "expanded": "Server - POS controller" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "T - Other", "expanded": "Public Terminal - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Camera", "expanded": "Network - Camera or surveillance system" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Unknown", "expanded": "Server - Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - DHCP", "expanded": "Server - DHCP" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - POS terminal", "expanded": "User Device - POS terminal" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - LAN", "expanded": "Network - Wired LAN" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Manager", "expanded": "People - Manager" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Payment card", "expanded": "Media - Payment card (e.g., magstripe, EMV)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Public WAN", "expanded": "Network - Public WAN" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Former employee", "expanded": "People - Former employee" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Authentication", "expanded": "Server - Authentication" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Mobile phone", "expanded": "User Device - Mobile phone or smartphone" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Router or switch", "expanded": "Network - Router or switch" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "T - Kiosk", "expanded": "Public Terminal - Self-service kiosk" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - HSM", "expanded": "Network - Hardware security module (HSM)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Peripheral", "expanded": "User Device - Peripheral (e.g., printer, copier, fax)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Code repository", "expanded": "Server - Code repository" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - SCADA", "expanded": "Server - SCADA system" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - End-user", "expanded": "People - End-user" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - SAN", "expanded": "Network - Storage area network (SAN)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "T - ATM", "expanded": "Public Terminal - Automated Teller Machine (ATM)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - RTU", "expanded": "Network - Remote terminal unit (RTU)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Smart card", "expanded": "Media - Identity smart card" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - IDS", "expanded": "Network - IDS or IPs" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - PLC", "expanded": "Network - Programmable logic controller (PLC)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Other", "expanded": "Network - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Cashier", "expanded": "People - Cashier" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Executive", "expanded": "People - Executive" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Desktop", "expanded": "User Device - Desktop or workstation" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Tablet", "expanded": "User Device - Tablet" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Firewall", "expanded": "Network - Firewall" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Customer", "expanded": "People - Customer" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Mainframe", "expanded": "Server - Mainframe" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Directory", "expanded": "Server - Directory (LDAP, AD)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Auth token", "expanded": "User Device - Authentication token or device" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Media", "expanded": "User Device - Media player or recorder" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "T - Gas terminal", "expanded": "Public Terminal - Gas \"pay-at-the-pump\" terminal" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "T - PED pad", "expanded": "Public Terminal - Detached PIN pad or card reader" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Disk drive", "expanded": "Media - Hard disk drive" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - VM host", "expanded": "Server - Virtual Host" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Auditor", "expanded": "People - Auditor" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - VoIP phone", "expanded": "User Device - VoIP phone" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Broadband", "expanded": "Network - Mobile broadband network" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Other", "expanded": "User Device - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Telephone", "expanded": "User Device - Telephone" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Call center", "expanded": "People - Call center" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Private WAN", "expanded": "Network - Private WAN" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - DNS", "expanded": "Server - DNS" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Helpdesk", "expanded": "People - Helpdesk" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Telephone", "expanded": "Network - Telephone" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "U - Laptop", "expanded": "User Device - Laptop" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Log", "expanded": "Server - Log or event management" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Finance", "expanded": "People - Finance" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Human resources", "expanded": "People - Human resources" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - VoIP adapter", "expanded": "Network - VoIP adapter" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Backup", "expanded": "Server - Backup" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Partner", "expanded": "People - Partner" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Maintenance", "expanded": "People - Maintenance" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Payment switch", "expanded": "Server - Payment switch or gateway" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - DCS", "expanded": "Server - Distributed control system (DCS)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Other", "expanded": "People - Other/Unknown" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Proxy", "expanded": "Server - Proxy" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Mail", "expanded": "Server - Mail" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Tapes", "expanded": "Media - Backup tapes" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Remote access", "expanded": "Server - Remote access" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - Access reader", "expanded": "Network - Access control reader (e.g., badge, biometric)" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - File", "expanded": "Server - File" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "S - Web application", "expanded": "Server - Web application" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Documents", "expanded": "Media - Documents" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "N - WLAN", "expanded": "Network - Wireless LAN" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "P - Developer", "expanded": "People - Developer" } ] }, { "predicate": "asset:variety", "entry": [ { "value": "M - Disk media", "expanded": "Media - Disk media (e.g., CDs, DVDs)" } ] }, { "predicate": "asset:accessibility", "entry": [ { "value": "NA", "expanded": "Not applicable" } ] }, { "predicate": "asset:accessibility", "entry": [ { "value": "Internal", "expanded": "Internally accessible" } ] }, { "predicate": "asset:accessibility", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:accessibility", "entry": [ { "value": "External", "expanded": "Publicly accessible" } ] }, { "predicate": "asset:accessibility", "entry": [ { "value": "Isolated", "expanded": "Internally isolated or restricted environment" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "3rd party hosted", "expanded": "Hosted by 3rd party" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "3rd party managed", "expanded": "Managed by 3rd party" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "3rd party owned", "expanded": "Owned by 3rd party" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "Personally owned", "expanded": "Personally owned asset" } ] }, { "predicate": "asset:governance", "entry": [ { "value": "Internally isolated", "expanded": "Isolated internal asset" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "External shared", "expanded": "Externally hosted in a shared envirnoment" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "External dedicated", "expanded": "Externally hosted in a dedicated envirnoment" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "NA", "expanded": "Not applicable" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "Internal", "expanded": "Internally hosted" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "External", "expanded": "Externally hosted (unsure if dedicated or shared)" } ] }, { "predicate": "asset:hosting", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "Customer", "expanded": "Customer owned" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "Victim", "expanded": "Victim owned" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "NA", "expanded": "Not applicable" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "Employee", "expanded": "Employee owned" } ] }, { "predicate": "asset:ownership", "entry": [ { "value": "Partner", "expanded": "Partner owned" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Hosting error", "expanded": "Misconfiguration or error by hosting provider" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "User breakout", "expanded": "Elevation of privilege by another customer in shared environment" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Hosting governance", "expanded": "Lack of security process or procedure by hosting provider" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Customer attack", "expanded": "Penetration of another web site on shared device" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Hypervisor", "expanded": "Hypervisor break-out attack" } ] }, { "predicate": "asset:cloud", "entry": [ { "value": "Partner application", "expanded": "Application vulnerability in partner-developed application" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "1001 to 10000", "expanded": "1,001 to 10,000 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "Over 100000", "expanded": "Over 100,0001 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "Large", "expanded": "Large organizations (over 1,000 employees)" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "Unknown", "expanded": "Unknown number of employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "50001 to 100000", "expanded": "50,001 to 100,000 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "101 to 1000", "expanded": "101 to 1,000 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "25001 to 50000", "expanded": "25,001 to 50,000 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "10001 to 25000", "expanded": "10,001 to 25,000 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "Small", "expanded": "Small organizations (1,000 employees or less)" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "1 to 10", "expanded": "1 to 10 employees" } ] }, { "predicate": "victim:employee_count", "entry": [ { "value": "11 to 100", "expanded": "11 to 100 employees" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Months", "expanded": "Months" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Seconds", "expanded": "Seconds" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "NA", "expanded": "NA" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Never", "expanded": "Never" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Days", "expanded": "Days" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Years", "expanded": "Years" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Hours", "expanded": "Hours" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Weeks", "expanded": "Weeks" } ] }, { "predicate": "timeline:unit", "entry": [ { "value": "Minutes", "expanded": "Minutes" } ] }, { "predicate": "impact:loss:rating", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "impact:loss:rating", "entry": [ { "value": "Major", "expanded": "Major" } ] }, { "predicate": "impact:loss:rating", "entry": [ { "value": "Moderate", "expanded": "Moderate" } ] }, { "predicate": "impact:loss:rating", "entry": [ { "value": "None", "expanded": "None" } ] }, { "predicate": "impact:loss:rating", "entry": [ { "value": "Minor", "expanded": "Minor" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Legal and regulatory", "expanded": "Legal and regulatory costs" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Asset and fraud", "expanded": "Asset and fraud-related losses" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Business disruption", "expanded": "Business disruption" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Response and recovery", "expanded": "Response and recovery costs" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Competitive advantage", "expanded": "Loss of competitive advantage" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Operating costs", "expanded": "Increased operating costs" } ] }, { "predicate": "impact:loss:variety", "entry": [ { "value": "Brand damage", "expanded": "Brand and market damage" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Misrepresentation", "expanded": "Misrepresentation" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Modify data", "expanded": "Modified stored data or content" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Created account", "expanded": "Created new user account" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Defacement", "expanded": "Deface content" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Log tampering", "expanded": "Log tampering or modification" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Modify privileges", "expanded": "Modified privileges or permissions" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Software installation", "expanded": "Software installation or code modification" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Fraudulent transaction", "expanded": "Initiate fraudulent transaction" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Alter behavior", "expanded": "Influence or alter human behavior" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Hardware tampering", "expanded": "Hardware tampering or physical alteration" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Modify configuration", "expanded": "Modified configuration or services" } ] }, { "predicate": "attribute:integrity:variety", "entry": [ { "value": "Repurpose", "expanded": "Repurposed asset for unauthorized function" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Acceleration", "expanded": "Acceleration" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Interruption", "expanded": "Interruption" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Loss", "expanded": "Loss" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Degradation", "expanded": "Performance degradation" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Obscuration", "expanded": "Conversion or obscuration" } ] }, { "predicate": "attribute:availability:variety", "entry": [ { "value": "Destruction", "expanded": "Destruction" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Customer", "expanded": "Customer" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Patient", "expanded": "Patient" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Student", "expanded": "Student" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Employee", "expanded": "Employee" } ] }, { "predicate": "attribute:confidentiality:data_victim", "entry": [ { "value": "Partner", "expanded": "Partner" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Transmitted encrypted", "expanded": "Transmitted encrypted" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Transmitted unencrypted", "expanded": "Transmitted unencrypted" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Stored", "expanded": "Stored" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Transmitted", "expanded": "Transmitted" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Processed", "expanded": "Processed" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Stored encrypted", "expanded": "Stored encrypted" } ] }, { "predicate": "attribute:confidentiality:state", "entry": [ { "value": "Stored unencrypted", "expanded": "Stored unencrypted" } ] }, { "predicate": "attribute:confidentiality:data_disclosure", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:confidentiality:data_disclosure", "entry": [ { "value": "Yes", "expanded": "Yes (confirmed)" } ] }, { "predicate": "attribute:confidentiality:data_disclosure", "entry": [ { "value": "Potentially", "expanded": "Potentially (at risk)" } ] }, { "predicate": "attribute:confidentiality:data_disclosure", "entry": [ { "value": "No", "expanded": "No" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Lateral move", "expanded": "Lateral move" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Job eval", "expanded": "Recent poor job evaluation" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Personal issues", "expanded": "Personal issues" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Let go", "expanded": "Fired, laid off, or let go" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Reprimanded", "expanded": "Recently reprimanded" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Hired", "expanded": "Recently hired" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Passed over", "expanded": "Recently passed over for promotion" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Demoted", "expanded": "Recently demoted or hours reduced" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Promoted", "expanded": "Recently promoted" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Resigned", "expanded": "Recently resigned" } ] }, { "predicate": "actor:internal:job_change", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "End-user", "expanded": "End-user or regular employee" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Human resources", "expanded": "Human resources staff" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Finance", "expanded": "Finance or accounting staff" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Helpdesk", "expanded": "Helpdesk staff" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Executive", "expanded": "Executive or upper management" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Cashier", "expanded": "Cashier, teller, or waiter" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Manager", "expanded": "Manager or supervisor" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Guard", "expanded": "Security guard" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Auditor", "expanded": "Auditor" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Maintenance", "expanded": "Maintenance or janitorial staff" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Call center", "expanded": "Call center staff" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "System admin", "expanded": "System or network administrator" } ] }, { "predicate": "actor:internal:variety", "entry": [ { "value": "Developer", "expanded": "Software developer" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Customer", "expanded": "Customer (B2C)" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Organized crime", "expanded": "Organized or professional criminal group" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Acquaintance", "expanded": "Relative or acquaintance of employee" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Competitor", "expanded": "Competitor" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Unaffiliated", "expanded": "Unaffiliated person(s)" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Force majeure", "expanded": "Force majeure (nature and chance)" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Former employee", "expanded": "Former employee (no longer had access)" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Nation-state", "expanded": "Nation-state" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Activist", "expanded": "Activist group" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Terrorist", "expanded": "Terrorist group" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Auditor", "expanded": "Auditor" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "State-affiliated", "expanded": "State-sponsored or affiliated group" } ] }, { "predicate": "actor:external:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Remote injection", "expanded": "Remotely injected by agent (i.e. via SQLi)" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Software update", "expanded": "Included in automated software update" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Instant messaging", "expanded": "Instant Messaging" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Email attachment", "expanded": "Email via user-executed attachment" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Direct install", "expanded": "Directly installed or inserted by threat agent (after system access)" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Download by malware", "expanded": "Downloaded and installed by local malware" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Removable media", "expanded": "Removable storage media or devices" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Web drive-by", "expanded": "Web via auto-executed or \"drive-by\" infection" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Email link", "expanded": "Email via embedded link" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Network propagation", "expanded": "Network propagation" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Email autoexecute", "expanded": "Email via automatic execution" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Web download", "expanded": "Web via user-executed or downloaded content" } ] }, { "predicate": "action:malware:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Spam", "expanded": "Send spam" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Packet sniffer", "expanded": "Packet sniffer (capture data from network)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Backdoor", "expanded": "Backdoor (enable remote access)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Exploit vuln", "expanded": "Exploit vulnerability in code (vs misconfig or weakness)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Password dumper", "expanded": "Password dumper (extract credential hashes)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Scan network", "expanded": "Scan or footprint network" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Downloader", "expanded": "Downloader (pull updates or other malware) " } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Adminware", "expanded": "System or network utilities (e.g., PsTools, Netcat)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Click fraud", "expanded": "Click fraud or Bitcoin mining" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Adware", "expanded": "Adware" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "C2", "expanded": "Command and control (C2)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Worm", "expanded": "Worm (propagate to other systems or devices)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Spyware/Keylogger", "expanded": "Spyware, keylogger or form-grabber (capture user input or activity)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Brute force", "expanded": "Brute force attack" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Capture app data", "expanded": "Capture data from application or system process" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Ram scraper", "expanded": "Ram scraper or memory parser (capture data from volatile memory)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Disable controls", "expanded": "Disable or interfere with security controls" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Capture stored data", "expanded": "Capture data stored on system disk" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Ransomware", "expanded": "Ransomware (encrypt or seize stored data)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Export data", "expanded": "Export data to another site or system" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Client-side attack", "expanded": "Client-side or browser attack (e.g., redirection, XSS, MitB)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "SQL injection", "expanded": "SQL injection attack" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Rootkit", "expanded": "Rootkit (maintain local privileges and stealth)" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "Destroy data", "expanded": "Destroy or corrupt stored data" } ] }, { "predicate": "action:malware:variety", "entry": [ { "value": "DoS", "expanded": "DoS attack" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "In-person", "expanded": "In-person" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Social media", "expanded": "Social media or networking" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Documents", "expanded": "Documents" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "SMS", "expanded": "SMS or texting" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Phone", "expanded": "Phone" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Website", "expanded": "Website" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "IM", "expanded": "Instant messaging" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Removable media", "expanded": "Removable storage media" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Email", "expanded": "Email" } ] }, { "predicate": "action:social:vector", "entry": [ { "value": "Software", "expanded": "Software" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Customer", "expanded": "Customer (B2C)" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "End-user", "expanded": "End-user or regular employee" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Human resources", "expanded": "Human resources staff" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Finance", "expanded": "Finance or accounting staff" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Helpdesk", "expanded": "Helpdesk staff" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Executive", "expanded": "Executive or upper management" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Cashier", "expanded": "Cashier, teller or waiter" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Manager", "expanded": "Manager or supervisor" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Former employee", "expanded": "Former employee" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Guard", "expanded": "Security guard" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Auditor", "expanded": "Auditor" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Maintenance", "expanded": "Maintenance or janitorial staff" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Call center", "expanded": "Call center staff" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Partner", "expanded": "Partner (B2B)" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "System admin", "expanded": "System or network administrator" } ] }, { "predicate": "action:social:target", "entry": [ { "value": "Developer", "expanded": "Software developer" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Scam", "expanded": "Online scam or hoax (e.g., scareware, 419 scam, auction fraud)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Phishing", "expanded": "Phishing (or any type of *ishing)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Elicitation", "expanded": "Elicitation (subtle extraction of info through conversation)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Spam", "expanded": "Spam (unsolicited or undesired email and advertisements)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Influence", "expanded": "Influence tactics (Leveraging authority or obligation, framing, etc)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Propaganda", "expanded": "Propaganda or disinformation" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Forgery", "expanded": "Forgery or counterfeiting (fake hardware, software, documents, etc)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Bribery", "expanded": "Bribery or solicitation" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Pretexting", "expanded": "Pretexting (dialogue leveraging invented scenario)" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Extortion", "expanded": "Extortion or blackmail" } ] }, { "predicate": "action:social:variety", "entry": [ { "value": "Baiting", "expanded": "Baiting (planting infected media)" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Hazmat", "expanded": "Hazardous material" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Temperature", "expanded": "Extreme temperature" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Hurricane", "expanded": "Hurricane" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Ice", "expanded": "Ice and snow" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Meteorite", "expanded": "Meteorite" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Pathogen", "expanded": "Pathogen" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Landslide", "expanded": "Landslide" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Tornado", "expanded": "Tornado" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Leak", "expanded": "Water leak" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Earthquake", "expanded": "Earthquake" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Particulates", "expanded": "Particulate matter (e.g., dust, smoke)" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Power failure", "expanded": "Power failure or fluctuation" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "EMI", "expanded": "Electromagnetic interference (EMI)" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Humidity", "expanded": "Humidity" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Tsunami", "expanded": "Tsunami" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "ESD", "expanded": "Electrostatic discharge (ESD)" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Deterioration", "expanded": "Deterioration and degradation" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Volcano", "expanded": "Volcanic eruption" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Lightning", "expanded": "Lightning" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Wind", "expanded": "Wind" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Flood", "expanded": "Flood" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Vermin", "expanded": "Vermin" } ] }, { "predicate": "action:environmental:variety", "entry": [ { "value": "Fire", "expanded": "Fire" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Random error", "expanded": "Random error (no reason, no fault)" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Carelessness", "expanded": "Carelessness" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Inadequate processes", "expanded": "Inadequate or insufficient processes" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Inadequate technology", "expanded": "Inadequate or insufficient technology resources" } ] }, { "predicate": "action:error:vector", "entry": [ { "value": "Inadequate personnel", "expanded": "Inadequate or insufficient personnel" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Disposal error", "expanded": "Disposal error" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Omission", "expanded": "Omission (something intended, but not done)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Loss", "expanded": "Loss or misplacement" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Maintenance error", "expanded": "Maintenance error" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Misinformation", "expanded": "Misinformation (unintentionally giving false info)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Physical accidents", "expanded": "Physical accidents (e.g., drops, bumps, spills)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Publishing error", "expanded": "Publishing error (private info to public doc or site)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Malfunction", "expanded": "Technical malfunction or glitch" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Capacity shortage", "expanded": "Poor capacity planning" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Programming error", "expanded": "Programming error (flaws or bugs in custom code)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Data entry error", "expanded": "Data entry error" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Gaffe", "expanded": "Gaffe (social or verbal slip)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Misconfiguration", "expanded": "Misconfiguration" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Misdelivery", "expanded": "Misdelivery (send wrong info or to wrong recipient)" } ] }, { "predicate": "action:error:variety", "entry": [ { "value": "Classification error", "expanded": "Classification or labeling error" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "Physical access", "expanded": "Physical access within corporate facility" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "Remote access", "expanded": "Remote access connection to corporate network (i.e. VPN)" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "LAN access", "expanded": "Local network access within corporate facility" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "Non-corporate", "expanded": "Non-corporate facilities or networks" } ] }, { "predicate": "action:misuse:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Unapproved software", "expanded": "Use of unapproved software or services" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Illicit content", "expanded": "Storage or distribution of illicit content" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Unapproved workaround", "expanded": "Unapproved workaround or shortcut" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Unapproved hardware", "expanded": "Use of unapproved hardware or devices" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Email misuse", "expanded": "Inappropriate use of email or IM" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Possession abuse", "expanded": "Abuse of physical access to asset" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Other", "expanded": " Other" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Net misuse", "expanded": "Inappropriate use of network or Web access" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Data mishandling", "expanded": "Handling of data in an unapproved manner" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Privilege abuse", "expanded": "Abuse of system access privileges" } ] }, { "predicate": "action:misuse:variety", "entry": [ { "value": "Knowledge abuse", "expanded": "Abuse of private or entrusted knowledge" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Physical access", "expanded": "Physical access or connection (i.e., at keyboard or via cable) " } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Command shell", "expanded": "Remote shell" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Backdoor or C2", "expanded": "Backdoor or command and control channel" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Web application", "expanded": "Web application" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Desktop sharing", "expanded": "Graphical desktop sharing (RDP, VNC, PCAnywhere, Citrix)" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "3rd party desktop", "expanded": "3rd party online desktop sharing (LogMeIn, Go2Assist)" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Partner", "expanded": "Partner connection or credential" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "VPN", "expanded": "VPN" } ] }, { "predicate": "action:hacking:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XSS", "expanded": "Cross-site scripting" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "HTTP Response Splitting", "expanded": "HTTP Response Splitting" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Buffer overflow", "expanded": "Buffer overflow" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Format string attack", "expanded": "Format string attack" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "LDAP injection", "expanded": "LDAP injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "SSI injection", "expanded": "SSI injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "MitM", "expanded": "Man-in-the-middle attack" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Path traversal", "expanded": "Path traversal" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "URL redirector abuse", "expanded": "URL redirector abuse" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Use of backdoor or C2", "expanded": "Use of Backdoor or C2 channel" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Mail command injection", "expanded": "Mail command injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Virtual machine escape", "expanded": "Virtual machine escape" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "OS commanding", "expanded": "OS commanding" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Soap array abuse", "expanded": "Soap array abuse" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Footprinting", "expanded": "Footprinting and fingerprinting" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Cryptanalysis", "expanded": "Cryptanalysis" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "SQLi", "expanded": "SQL injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XML external entities", "expanded": "XML external entities" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Abuse of functionality", "expanded": "Abuse of functionality" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XML injection", "expanded": "XML injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Routing detour", "expanded": "Routing detour" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "HTTP response smuggling", "expanded": "HTTP response smuggling" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Forced browsing", "expanded": "Forced browsing or predictable resource location" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Cache poisoning", "expanded": "Cache poisoning" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Null byte injection", "expanded": "Null byte injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Reverse engineering", "expanded": "Reverse engineering" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Brute force", "expanded": "Brute force or password guessing attacks" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Fuzz testing", "expanded": "Fuzz testing" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Offline cracking", "expanded": "Offline password or key cracking (e.g., rainbow tables, Hashcat, JtR)" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "CSRF", "expanded": "Cross-site request forgery" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XML entity expansion", "expanded": "XML entity expansion" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "RFI", "expanded": "Remote file inclusion" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Session fixation", "expanded": "Session fixation" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Integer overflows", "expanded": "Integer overflows" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XQuery injection", "expanded": "XQuery injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Pass-the-hash", "expanded": "Pass-the-hash" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XML attribute blowup", "expanded": "XML attribute blowup" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Session prediction", "expanded": "Credential or session prediction" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Use of stolen creds", "expanded": "Use of stolen authentication credentials" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "HTTP request smuggling", "expanded": "HTTP request smuggling" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "XPath injection", "expanded": "XPath injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "DoS", "expanded": "Denial of service" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Special element injection", "expanded": "Special element injection" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "HTTP request splitting", "expanded": "HTTP request splitting" } ] }, { "predicate": "action:hacking:variety", "entry": [ { "value": "Session replay", "expanded": "Session replay" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Personal vehicle", "expanded": "Personal vehicle" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Visitor privileges", "expanded": "Given temporary visitor access" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Public facility", "expanded": "Public facility or area" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Victim grounds", "expanded": "Victim outdoor grounds" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Uncontrolled location", "expanded": "The location was uncontrolled (public)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Partner vehicle", "expanded": "Partner vehicle (e.g., delivery truck)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Victim work area", "expanded": "Victim private or work area (e.g., office space)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Victim secure area", "expanded": "Victim high security area (e.g., server room, R&D labs)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Partner facility", "expanded": "Partner facility or area" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Personal residence", "expanded": "Personal residence" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Public vehicle", "expanded": "Public vehicle (e.g., plane, taxi)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Victim public area", "expanded": "Victim public or customer area (e.g., lobby, storefront)" } ] }, { "predicate": "action:physical:vector", "entry": [ { "value": "Privileged access", "expanded": "Held privileged access to location" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Skimmer", "expanded": "Installing card skimming device" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Snooping", "expanded": "Snooping (sneak about to gain info or access)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Tampering", "expanded": "Tampering (alter physical form or function)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Theft", "expanded": "Theft (taking assets without permission)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Connection", "expanded": "Connection" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Surveillance", "expanded": "Surveillance (monitoring and observation)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Assault", "expanded": "Assault (threats or acts of physical violence)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Wiretapping", "expanded": "Wiretapping (Physical tap to comms line)" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Bypassed controls", "expanded": "Bypassed physical barriers or controls" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Disabled controls", "expanded": "Disabled physical barriers or controls" } ] }, { "predicate": "action:physical:variety", "entry": [ { "value": "Destruction", "expanded": "Destruction (deliberate damaging or disabling)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Source code", "expanded": "Source code" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Personal", "expanded": "Personal or identifying information (e.g., addr, ID#, credit score)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Unknown", "expanded": "Unknown" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Medical", "expanded": "Medical records" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Classified", "expanded": "Classified information" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "System", "expanded": "System information (e.g., config info, open services)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Digital certificate", "expanded": "Digital certificate" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Secrets", "expanded": "Trade secrets" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Internal", "expanded": "Sensitive internal data (e.g., plans, reports, emails)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Virtual currency", "expanded": "Virtual currency" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Copyrighted", "expanded": "Copyrighted material" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Credentials", "expanded": "Authentication credentials (e.g., pwds, OTPs, biometrics)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Other", "expanded": "Other" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Payment", "expanded": "Payment card data (e.g., PAN, PIN, CVV2, Expiration)" } ] }, { "predicate": "attribute:confidentiality:data:variety", "entry": [ { "value": "Bank", "expanded": "Bank account data" } ] } ], "predicates": [ { "value": "iso_currency_code" }, { "value": "confidence" }, { "value": "targeted" }, { "value": "discovery_method" }, { "value": "cost_corrective_action" }, { "value": "security_incident" }, { "value": "country" }, { "value": "impact:overall_rating" }, { "value": "actor:motive" }, { "value": "asset:management" }, { "value": "asset:variety" }, { "value": "asset:accessibility" }, { "value": "asset:governance" }, { "value": "asset:hosting" }, { "value": "asset:ownership" }, { "value": "asset:cloud" }, { "value": "victim:employee_count" }, { "value": "timeline:unit" }, { "value": "impact:loss:rating" }, { "value": "impact:loss:variety" }, { "value": "attribute:integrity:variety" }, { "value": "attribute:availability:variety" }, { "value": "attribute:confidentiality:data_victim" }, { "value": "attribute:confidentiality:state" }, { "value": "attribute:confidentiality:data_disclosure" }, { "value": "actor:internal:job_change" }, { "value": "actor:internal:variety" }, { "value": "actor:external:variety" }, { "value": "action:malware:vector" }, { "value": "action:malware:variety" }, { "value": "action:social:vector" }, { "value": "action:social:target" }, { "value": "action:social:variety" }, { "value": "action:environmental:variety" }, { "value": "action:error:vector" }, { "value": "action:error:variety" }, { "value": "action:misuse:vector" }, { "value": "action:misuse:variety" }, { "value": "action:hacking:vector" }, { "value": "action:hacking:variety" }, { "value": "action:physical:vector" }, { "value": "action:physical:variety" }, { "value": "attribute:confidentiality:data:variety" } ] }