{
  "namespace": "circl",
  "description": "CIRCL Taxonomy - Schemes of Classification in Incident Response and Detection",
  "version": 5,
  "predicates": [
    {
      "value": "incident-classification",
      "expanded": "Incident Classification"
    },
    {
      "value": "topic",
      "expanded": "Topic"
    }
  ],
  "values": [
    {
      "predicate": "incident-classification",
      "entry": [
        {
          "value": "spam",
          "expanded": "Spam"
        },
        {
          "value": "system-compromise",
          "expanded": "System compromise"
        },
        {
          "value": "sabotage",
          "expanded": "Sabotage"
        },
        {
          "value": "privacy-violation",
          "expanded": "Privacy violation"
        },
        {
          "value": "scan",
          "expanded": "Scan"
        },
        {
          "value": "denial-of-service",
          "expanded": "Denial of Service"
        },
        {
          "value": "copyright-issue",
          "expanded": "Copyright issue"
        },
        {
          "value": "phishing",
          "expanded": "Phishing"
        },
        {
          "value": "whaling",
          "expanded": "Whaling"
        },
        {
          "value": "smishing",
          "expanded": "SMS Phishing"
        },
        {
          "value": "malware",
          "expanded": "Malware"
        },
        {
          "value": "XSS",
          "expanded": "XSS"
        },
        {
          "value": "vulnerability",
          "expanded": "Vulnerability"
        },
        {
          "value": "fastflux",
          "expanded": "Fastflux"
        },
        {
          "value": "domain-fronting",
          "expanded": "Domain Fronting"
        },
        {
          "value": "sql-injection",
          "expanded": "SQL Injection"
        },
        {
          "value": "information-leak",
          "expanded": "Information leak"
        },
        {
          "value": "scam",
          "expanded": "Scam"
        },
        {
          "value": "cryptojacking",
          "expanded": "Cryptojacking"
        },
        {
          "value": "locker",
          "expanded": "Locker"
        },
        {
          "value": "screenlocker",
          "expanded": "Screenlocker"
        },
        {
          "value": "wiper",
          "expanded": "Wiper"
        },
        {
          "value": "ransomware",
          "expanded": "ransomware"
        },
        {
          "value": "sextortion",
          "expanded": "sextortion"
        },
        {
          "value": "social-engineering",
          "expanded": "Social Engineering"
        },
        {
          "value": "gdpr-violation",
          "expanded": "GDPR Violation"
        },
        {
          "value": "covid-19",
          "expanded": "covid-19"
        }
      ]
    },
    {
      "predicate": "topic",
      "entry": [
        {
          "value": "finance",
          "expanded": "Finance"
        },
        {
          "value": "ict",
          "expanded": "ICT"
        },
        {
          "value": "individual",
          "expanded": "Individual"
        },
        {
          "value": "industry",
          "expanded": "Industry"
        },
        {
          "value": "medical",
          "expanded": "Medical"
        },
        {
          "value": "services",
          "expanded": "Services"
        },
        {
          "value": "undefined",
          "expanded": "Undefined"
        }
      ]
    }
  ]
}