{
  "namespace": "event-classification",
  "description": "Classification of events as seen in tools such as RT/IR, MISP and other",
  "version": 1,
  "predicates": [
    {
      "value": "event-class",
      "expanded": "Event Classification"
    }
  ],
  "values": [
    {
      "predicate": "event-class",
      "entry": [
        {
          "value": "incident_report",
          "expanded": "Incident Report"
        },
        {
          "value": "incident",
          "expanded": "Incident"
        },
        {
          "value": "investigation",
          "expanded": "Investigation"
        },
        {
          "value": "countermeasure",
          "expanded": "Countermeasure"
        },
        {
          "value": "general",
          "expanded": "General"
        },
        {
          "value": "exercise",
          "expanded": "Exercise"
        }
      ]
    }
  ]
}