misp-taxonomies/unified-kill-chain/machinetag.json

114 lines
2.4 KiB
JSON

{
"namespace": "unified-kill-chain",
"expanded": "Unified Kill Chain",
"description": "The Unified Kill Chain is a refinement to the Kill Chain.",
"version": 1,
"predicates": [
{
"value": "Initial Foothold",
"expanded": "Initial Foothold"
},
{
"value": "Network Propagation",
"expanded": "Network Propagation"
},
{
"value": "Action on Objectives",
"expanded": "Action on Objectives"
}
],
"values": [
{
"predicate": "Initial Foothold",
"entry": [
{
"expanded": "Reconnaissance",
"value": "reconnaissance"
},
{
"expanded": "Weaponization",
"value": "weaponization"
},
{
"expanded": "Delivery",
"value": "delivery"
},
{
"expanded": "Social Engineering",
"value": "social-engineering"
},
{
"expanded": "Exploitation",
"value": "exploitation"
},
{
"expanded": "Persistence",
"value": "persistence"
},
{
"expanded": "Defense Evasion",
"value": "defense-evasion"
},
{
"expanded": "Command & Control",
"value": "command-control"
}
]
},
{
"predicate": "Network Propagation",
"entry": [
{
"expanded": "Pivoting",
"value": "pivoting"
},
{
"expanded": "Discovery",
"value": "discovery"
},
{
"expanded": "Privilege Escalation",
"value": "privilege-escalation"
},
{
"expanded": "Execution",
"value": "execution"
},
{
"expanded": "Credential Access",
"value": "credential-access"
},
{
"expanded": "Lateral Movement",
"value": "lateral-movement"
}
]
},
{
"predicate": "Action on Objectives",
"entry": [
{
"expanded": "Access",
"value": "access"
},
{
"expanded": "Collection",
"value": "collection"
},
{
"expanded": "Exfiltration",
"value": "exfiltration"
},
{
"expanded": "Impact",
"value": "impact"
},
{
"expanded": "Objectives",
"value": "objectives"
}
]
}
]
}