impact.loss.rating.Major
impact.loss.rating.Moderate
impact.loss.rating.Minor
impact.loss.rating.None
impact.loss.rating.Unknown
impact.loss.variety.Asset and fraud
impact.loss.variety.Brand damage
impact.loss.variety.Business disruption
impact.loss.variety.Operating costs
impact.loss.variety.Legal and regulatory
impact.loss.variety.Competitive advantage
impact.loss.variety.Response and recovery
impact.overall_rating.Insignificant
impact.overall_rating.Distracting
impact.overall_rating.Painful
impact.overall_rating.Damaging
impact.overall_rating.Catastrophic
impact.overall_rating.Unknown
iso_currency_code.AED
iso_currency_code.AFN
iso_currency_code.ALL
iso_currency_code.AMD
iso_currency_code.ANG
iso_currency_code.AOA
iso_currency_code.ARS
iso_currency_code.AUD
iso_currency_code.AWG
iso_currency_code.AZN
iso_currency_code.BAM
iso_currency_code.BBD
iso_currency_code.BDT
iso_currency_code.BGN
iso_currency_code.BHD
iso_currency_code.BIF
iso_currency_code.BMD
iso_currency_code.BND
iso_currency_code.BOB
iso_currency_code.BRL
iso_currency_code.BSD
iso_currency_code.BTN
iso_currency_code.BWP
iso_currency_code.BYR
iso_currency_code.BZD
iso_currency_code.CAD
iso_currency_code.CDF
iso_currency_code.CHF
iso_currency_code.CLP
iso_currency_code.CNY
iso_currency_code.COP
iso_currency_code.CRC
iso_currency_code.CUC
iso_currency_code.CUP
iso_currency_code.CVE
iso_currency_code.CZK
iso_currency_code.DJF
iso_currency_code.DKK
iso_currency_code.DOP
iso_currency_code.DZD
iso_currency_code.EGP
iso_currency_code.ERN
iso_currency_code.ETB
iso_currency_code.EUR
iso_currency_code.FJD
iso_currency_code.FKP
iso_currency_code.GBP
iso_currency_code.GEL
iso_currency_code.GGP
iso_currency_code.GHS
iso_currency_code.GIP
iso_currency_code.GMD
iso_currency_code.GNF
iso_currency_code.GTQ
iso_currency_code.GYD
iso_currency_code.HKD
iso_currency_code.HNL
iso_currency_code.HRK
iso_currency_code.HTG
iso_currency_code.HUF
iso_currency_code.IDR
iso_currency_code.ILS
iso_currency_code.IMP
iso_currency_code.INR
iso_currency_code.IQD
iso_currency_code.IRR
iso_currency_code.ISK
iso_currency_code.JEP
iso_currency_code.JMD
iso_currency_code.JOD
iso_currency_code.JPY
iso_currency_code.KES
iso_currency_code.KGS
iso_currency_code.KHR
iso_currency_code.KMF
iso_currency_code.KPW
iso_currency_code.KRW
iso_currency_code.KWD
iso_currency_code.KYD
iso_currency_code.KZT
iso_currency_code.LAK
iso_currency_code.LBP
iso_currency_code.LKR
iso_currency_code.LRD
iso_currency_code.LSL
iso_currency_code.LTL
iso_currency_code.LVL
iso_currency_code.LYD
iso_currency_code.MAD
iso_currency_code.MDL
iso_currency_code.MGA
iso_currency_code.MKD
iso_currency_code.MMK
iso_currency_code.MNT
iso_currency_code.MOP
iso_currency_code.MRO
iso_currency_code.MUR
iso_currency_code.MVR
iso_currency_code.MWK
iso_currency_code.MXN
iso_currency_code.MYR
iso_currency_code.MZN
iso_currency_code.NAD
iso_currency_code.NGN
iso_currency_code.NIO
iso_currency_code.NOK
iso_currency_code.NPR
iso_currency_code.NZD
iso_currency_code.OMR
iso_currency_code.PAB
iso_currency_code.PEN
iso_currency_code.PGK
iso_currency_code.PHP
iso_currency_code.PKR
iso_currency_code.PLN
iso_currency_code.PYG
iso_currency_code.QAR
iso_currency_code.RON
iso_currency_code.RSD
iso_currency_code.RUB
iso_currency_code.RWF
iso_currency_code.SAR
iso_currency_code.SBD
iso_currency_code.SCR
iso_currency_code.SDG
iso_currency_code.SEK
iso_currency_code.SGD
iso_currency_code.SHP
iso_currency_code.SLL
iso_currency_code.SOS
iso_currency_code.SPL
iso_currency_code.SRD
iso_currency_code.STD
iso_currency_code.SVC
iso_currency_code.SYP
iso_currency_code.SZL
iso_currency_code.THB
iso_currency_code.TJS
iso_currency_code.TMT
iso_currency_code.TND
iso_currency_code.TOP
iso_currency_code.TRY
iso_currency_code.TTD
iso_currency_code.TVD
iso_currency_code.TWD
iso_currency_code.TZS
iso_currency_code.UAH
iso_currency_code.UGX
iso_currency_code.USD
iso_currency_code.UYU
iso_currency_code.UZS
iso_currency_code.VEF
iso_currency_code.VND
iso_currency_code.VUV
iso_currency_code.WST
iso_currency_code.XAF
iso_currency_code.XCD
iso_currency_code.XDR
iso_currency_code.XOF
iso_currency_code.XPF
iso_currency_code.YER
iso_currency_code.ZAR
iso_currency_code.ZMK
iso_currency_code.ZWD
confidence.High
confidence.Medium
confidence.Low
confidence.None
targeted.Opportunistic
targeted.Targeted
targeted.Unknown
targeted.NA
attribute.integrity.variety.Created account
attribute.integrity.variety.Hardware tampering
attribute.integrity.variety.Alter behavior
attribute.integrity.variety.Fraudulent transaction
attribute.integrity.variety.Log tampering
attribute.integrity.variety.Misappropriation
attribute.integrity.variety.Misrepresentation
attribute.integrity.variety.Modify configuration
attribute.integrity.variety.Modify privileges
attribute.integrity.variety.Modify data
attribute.integrity.variety.Software installation
attribute.integrity.variety.Unknown
attribute.integrity.variety.Other
attribute.availability.variety.Destruction
attribute.availability.variety.Loss
attribute.availability.variety.Interruption
attribute.availability.variety.Degradation
attribute.availability.variety.Acceleration
attribute.availability.variety.Obscuration
attribute.availability.variety.Unknown
attribute.availability.variety.Other
attribute.confidentiality.state.Stored
attribute.confidentiality.state.Stored encrypted
attribute.confidentiality.state.Stored unencrypted
attribute.confidentiality.state.Transmitted
attribute.confidentiality.state.Transmitted encrypted
attribute.confidentiality.state.Transmitted unencrypted
attribute.confidentiality.state.Processed
attribute.confidentiality.state.Unknown
attribute.confidentiality.data.variety.Credentials
attribute.confidentiality.data.variety.Bank
attribute.confidentiality.data.variety.Classified
attribute.confidentiality.data.variety.Copyrighted
attribute.confidentiality.data.variety.Medical
attribute.confidentiality.data.variety.Payment
attribute.confidentiality.data.variety.Personal
attribute.confidentiality.data.variety.Internal
attribute.confidentiality.data.variety.System
attribute.confidentiality.data.variety.Secrets
attribute.confidentiality.data.variety.Unknown
attribute.confidentiality.data.variety.Other
attribute.confidentiality.data_disclosure.Yes
attribute.confidentiality.data_disclosure.Potentially
attribute.confidentiality.data_disclosure.No
attribute.confidentiality.data_disclosure.Unknown
discovery_method.Ext - actor disclosure
discovery_method.Ext - fraud detection
discovery_method.Ext - monitoring service
discovery_method.Ext - customer
discovery_method.Ext - unrelated party
discovery_method.Ext - audit
discovery_method.Ext - unknown
discovery_method.Int - antivirus
discovery_method.Int - incident response
discovery_method.Int - financial audit
discovery_method.Int - fraud detection
discovery_method.Int - HIDS
discovery_method.Int - IT audit
discovery_method.Int - log review
discovery_method.Int - NIDS
discovery_method.Ext - law enforcement
discovery_method.Int - security alarm
discovery_method.Int - reported by user
discovery_method.Int - unknown
discovery_method.Unknown
discovery_method.Other
actor.motive.NA
actor.motive.Espionage
actor.motive.Fear
actor.motive.Financial
actor.motive.Fun
actor.motive.Grudge
actor.motive.Ideology
actor.motive.Convenience
actor.motive.Unknown
actor.motive.Other
actor.internal.variety.Auditor
actor.internal.variety.Call center
actor.internal.variety.Cashier
actor.internal.variety.End-user
actor.internal.variety.Executive
actor.internal.variety.Finance
actor.internal.variety.Helpdesk
actor.internal.variety.Human resources
actor.internal.variety.Maintenance
actor.internal.variety.Manager
actor.internal.variety.Guard
actor.internal.variety.Developer
actor.internal.variety.System admin
actor.internal.variety.Unknown
actor.internal.variety.Other
actor.external.variety.Activist
actor.external.variety.Auditor
actor.external.variety.Competitor
actor.external.variety.Customer
actor.external.variety.Force majeure
actor.external.variety.Former employee
actor.external.variety.Nation-state
actor.external.variety.Organized crime
actor.external.variety.Acquaintance
actor.external.variety.State-affiliated
actor.external.variety.Terrorist
actor.external.variety.Unaffiliated
actor.external.variety.Unknown
actor.external.variety.Other
cost_corrective_action.Simple and cheap
cost_corrective_action.Difficult and expensive
cost_corrective_action.Something in-between
cost_corrective_action.Unknown
security_incident.Confirmed
security_incident.Suspected
security_incident.False positive
security_incident.Near miss
asset.management.Internal
asset.management.External
asset.management.Unknown
asset.management.NA
asset.variety.S - Authentication
asset.variety.S - Backup
asset.variety.S - Database
asset.variety.S - DHCP
asset.variety.S - Directory
asset.variety.S - DCS
asset.variety.S - DNS
asset.variety.S - File
asset.variety.S - Log
asset.variety.S - Mail
asset.variety.S - Mainframe
asset.variety.S - Payment switch
asset.variety.S - POS controller
asset.variety.S - Print
asset.variety.S - Proxy
asset.variety.S - Remote access
asset.variety.S - SCADA
asset.variety.S - Web application
asset.variety.S - Code repository
asset.variety.S - VM host
asset.variety.S - Other
asset.variety.N - Access reader
asset.variety.N - Camera
asset.variety.N - Firewall
asset.variety.N - HSM
asset.variety.N - IDS
asset.variety.N - Broadband
asset.variety.N - PBX
asset.variety.N - Private WAN
asset.variety.N - PLC
asset.variety.N - Public WAN
asset.variety.N - RTU
asset.variety.N - Router or switch
asset.variety.N - SAN
asset.variety.N - Telephone
asset.variety.N - VoIP adapter
asset.variety.N - LAN
asset.variety.N - WLAN
asset.variety.N - Other
asset.variety.U - Auth token
asset.variety.U - Desktop
asset.variety.U - Laptop
asset.variety.U - Media
asset.variety.U - Mobile phone
asset.variety.U - Peripheral
asset.variety.U - POS terminal
asset.variety.U - Tablet
asset.variety.U - Telephone
asset.variety.U - VoIP phone
asset.variety.U - Other
asset.variety.T - ATM
asset.variety.T - PED pad
asset.variety.T - Gas terminal
asset.variety.T - Kiosk
asset.variety.T - Other
asset.variety.M - Tapes
asset.variety.M - Disk media
asset.variety.M - Documents
asset.variety.M - Flash drive
asset.variety.M - Disk drive
asset.variety.M - Smart card
asset.variety.M - Payment card
asset.variety.M - Other
asset.variety.P - System admin
asset.variety.P - Auditor
asset.variety.P - Call center
asset.variety.P - Cashier
asset.variety.P - Customer
asset.variety.P - Developer
asset.variety.P - End-user
asset.variety.P - Executive
asset.variety.P - Finance
asset.variety.P - Former employee
asset.variety.P - Guard
asset.variety.P - Helpdesk
asset.variety.P - Human resources
asset.variety.P - Maintenance
asset.variety.P - Manager
asset.variety.P - Partner
asset.variety.P - Other
asset.variety.Unknown
asset.accessibility.External
asset.accessibility.Internal
asset.accessibility.Isolated
asset.accessibility.Unknown
asset.accessibility.NA
asset.hosting.Internal
asset.hosting.External shared
asset.hosting.External dedicated
asset.hosting.External
asset.hosting.Unknown
asset.hosting.NA
asset.ownership.Victim
asset.ownership.Employee
asset.ownership.Partner
asset.ownership.Customer
asset.ownership.Unknown
asset.ownership.NA
asset.cloud.Hypervisor
asset.cloud.Partner application
asset.cloud.Hosting governance
asset.cloud.Customer attack
asset.cloud.Hosting error
asset.cloud.User breakout
asset.cloud.Unknown
asset.cloud.Other
victim.employee_count.1 to 10
victim.employee_count.11 to 100
victim.employee_count.101 to 1000
victim.employee_count.Small
victim.employee_count.Large
victim.employee_count.1001 to 10000
victim.employee_count.10001 to 25000
victim.employee_count.25001 to 50000
victim.employee_count.50001 to 100000
victim.employee_count.Over 100000
victim.employee_count.Unknown
country.AD
country.AE
country.AF
country.AG
country.AI
country.AL
country.AM
country.AO
country.AQ
country.AR
country.AS
country.AT
country.AU
country.AW
country.AX
country.AZ
country.BA
country.BB
country.BD
country.BE
country.BF
country.BG
country.BH
country.BI
country.BJ
country.BL
country.BM
country.BN
country.BO
country.BQ
country.BR
country.BS
country.BT
country.BV
country.BW
country.BY
country.BZ
country.CA
country.CC
country.CD
country.CF
country.CG
country.CH
country.CI
country.CK
country.CL
country.CM
country.CN
country.CO
country.CR
country.CU
country.CV
country.CW
country.CX
country.CY
country.CZ
country.DE
country.DJ
country.DK
country.DM
country.DO
country.DZ
country.EC
country.EE
country.EG
country.EH
country.ER
country.ES
country.ET
country.FI
country.FJ
country.FK
country.FM
country.FO
country.FR
country.GA
country.GB
country.GD
country.GE
country.GF
country.GG
country.GH
country.GI
country.GL
country.GM
country.GN
country.GP
country.GQ
country.GR
country.GS
country.GT
country.GU
country.GW
country.GY
country.HK
country.HM
country.HN
country.HR
country.HT
country.HU
country.ID
country.IE
country.IL
country.IM
country.IN
country.IO
country.IQ
country.IR
country.IS
country.IT
country.JE
country.JM
country.JO
country.JP
country.KE
country.KG
country.KH
country.KI
country.KM
country.KN
country.KP
country.KR
country.KW
country.KY
country.KZ
country.LA
country.LB
country.LC
country.LI
country.LK
country.LR
country.LS
country.LT
country.LU
country.LV
country.LY
country.MA
country.MC
country.MD
country.ME
country.MF
country.MG
country.MH
country.MK
country.ML
country.MM
country.MN
country.MO
country.MP
country.MQ
country.MR
country.MS
country.MT
country.MU
country.MV
country.MW
country.MX
country.MY
country.MZ
country.NA
country.NC
country.NE
country.NF
country.NG
country.NI
country.NL
country.NO
country.NP
country.NR
country.NU
country.NZ
country.OM
country.Other
country.PA
country.PE
country.PF
country.PG
country.PH
country.PK
country.PL
country.PM
country.PN
country.PR
country.PS
country.PT
country.PW
country.PY
country.QA
country.RE
country.RO
country.RS
country.RU
country.RW
country.SA
country.SB
country.SC
country.SD
country.SE
country.SG
country.SH
country.SI
country.SJ
country.SK
country.SL
country.SM
country.SN
country.SO
country.SR
country.SS
country.ST
country.SV
country.SX
country.SY
country.SZ
country.TC
country.TD
country.TF
country.TG
country.TH
country.TJ
country.TK
country.TL
country.TM
country.TN
country.TO
country.TR
country.TT
country.TV
country.TW
country.TZ
country.UA
country.UG
country.UM
country.US
country.UY
country.UZ
country.Unknown
country.VA
country.VC
country.VE
country.VG
country.VI
country.VN
country.VU
country.WF
country.WS
country.YE
country.YT
country.ZA
country.ZM
country.ZW
action.malware.vector.Direct install
action.malware.vector.Download by malware
action.malware.vector.Email autoexecute
action.malware.vector.Email link
action.malware.vector.Email attachment
action.malware.vector.Instant messaging
action.malware.vector.Network propagation
action.malware.vector.Remote injection
action.malware.vector.Removable media
action.malware.vector.Web drive-by
action.malware.vector.Web download
action.malware.vector.Unknown
action.malware.vector.Other
action.malware.variety.Adware
action.malware.variety.Backdoor
action.malware.variety.Brute force
action.malware.variety.Capture app data
action.malware.variety.Capture stored data
action.malware.variety.Client-side attack
action.malware.variety.Click fraud
action.malware.variety.C2
action.malware.variety.Destroy data
action.malware.variety.Disable controls
action.malware.variety.DoS
action.malware.variety.Downloader
action.malware.variety.Exploit vuln
action.malware.variety.Export data
action.malware.variety.Packet sniffer
action.malware.variety.Password dumper
action.malware.variety.Ram scraper
action.malware.variety.Ransomware
action.malware.variety.Rootkit
action.malware.variety.Scan network
action.malware.variety.Spam
action.malware.variety.Spyware/Keylogger
action.malware.variety.SQL injection
action.malware.variety.Adminware
action.malware.variety.Worm
action.malware.variety.Unknown
action.malware.variety.Other
action.social.vector.Documents
action.social.vector.Email
action.social.vector.In-person
action.social.vector.IM
action.social.vector.Phone
action.social.vector.Removable media
action.social.vector.SMS
action.social.vector.Social media
action.social.vector.Software
action.social.vector.Website
action.social.vector.Unknown
action.social.vector.Other
action.social.target.Auditor
action.social.target.Call center
action.social.target.Cashier
action.social.target.Customer
action.social.target.End-user
action.social.target.Executive
action.social.target.Finance
action.social.target.Former employee
action.social.target.Helpdesk
action.social.target.Human resources
action.social.target.Maintenance
action.social.target.Manager
action.social.target.Partner
action.social.target.Guard
action.social.target.Developer
action.social.target.System admin
action.social.target.Unknown
action.social.target.Other
action.social.variety.Baiting
action.social.variety.Bribery
action.social.variety.Elicitation
action.social.variety.Extortion
action.social.variety.Forgery
action.social.variety.Influence
action.social.variety.Scam
action.social.variety.Phishing
action.social.variety.Pretexting
action.social.variety.Propaganda
action.social.variety.Spam
action.social.variety.Unknown
action.social.variety.Other
action.environmental.variety.Deterioration
action.environmental.variety.Earthquake
action.environmental.variety.EMI
action.environmental.variety.ESD
action.environmental.variety.Temperature
action.environmental.variety.Fire
action.environmental.variety.Flood
action.environmental.variety.Hazmat
action.environmental.variety.Humidity
action.environmental.variety.Hurricane
action.environmental.variety.Ice
action.environmental.variety.Landslide
action.environmental.variety.Lightning
action.environmental.variety.Meteorite
action.environmental.variety.Particulates
action.environmental.variety.Pathogen
action.environmental.variety.Power failure
action.environmental.variety.Tornado
action.environmental.variety.Tsunami
action.environmental.variety.Vermin
action.environmental.variety.Volcano
action.environmental.variety.Leak
action.environmental.variety.Wind
action.environmental.variety.Unknown
action.environmental.variety.Other
action.error.vector.Random error
action.error.vector.Carelessness
action.error.vector.Inadequate personnel
action.error.vector.Inadequate processes
action.error.vector.Inadequate technology
action.error.vector.Unknown
action.error.vector.Other
action.error.variety.Classification error
action.error.variety.Data entry error
action.error.variety.Disposal error
action.error.variety.Gaffe
action.error.variety.Loss
action.error.variety.Maintenance error
action.error.variety.Misconfiguration
action.error.variety.Misdelivery
action.error.variety.Misinformation
action.error.variety.Omission
action.error.variety.Physical accidents
action.error.variety.Capacity shortage
action.error.variety.Programming error
action.error.variety.Publishing error
action.error.variety.Malfunction
action.error.variety.Unknown
action.error.variety.Other
action.misuse.vector.Physical access
action.misuse.vector.LAN access
action.misuse.vector.Remote access
action.misuse.vector.Non-corporate
action.misuse.vector.Unknown
action.misuse.vector.Other
action.misuse.variety.Knowledge abuse
action.misuse.variety.Privilege abuse
action.misuse.variety.Embezzlement
action.misuse.variety.Data mishandling
action.misuse.variety.Email misuse
action.misuse.variety.Net misuse
action.misuse.variety.Illicit content
action.misuse.variety.Unapproved workaround
action.misuse.variety.Unapproved hardware
action.misuse.variety.Unapproved software
action.misuse.variety.Unknown
action.misuse.variety.Other
action.hacking.vector.3rd party desktop
action.hacking.vector.Backdoor or C2
action.hacking.vector.Desktop sharing
action.hacking.vector.Physical access
action.hacking.vector.Command shell
action.hacking.vector.Partner
action.hacking.vector.VPN
action.hacking.vector.Web application
action.hacking.vector.Unknown
action.hacking.vector.Other
action.hacking.variety.Abuse of functionality
action.hacking.variety.Brute force
action.hacking.variety.Buffer overflow
action.hacking.variety.Cache poisoning
action.hacking.variety.Session prediction
action.hacking.variety.CSRF
action.hacking.variety.XSS
action.hacking.variety.Cryptanalysis
action.hacking.variety.DoS
action.hacking.variety.Footprinting
action.hacking.variety.Forced browsing
action.hacking.variety.Format string attack
action.hacking.variety.Fuzz testing
action.hacking.variety.HTTP request smuggling
action.hacking.variety.HTTP request splitting
action.hacking.variety.HTTP response smuggling
action.hacking.variety.HTTP Response Splitting
action.hacking.variety.Integer overflows
action.hacking.variety.LDAP injection
action.hacking.variety.Mail command injection
action.hacking.variety.MitM
action.hacking.variety.Null byte injection
action.hacking.variety.Offline cracking
action.hacking.variety.OS commanding
action.hacking.variety.Path traversal
action.hacking.variety.RFI
action.hacking.variety.Reverse engineering
action.hacking.variety.Routing detour
action.hacking.variety.Session fixation
action.hacking.variety.Session replay
action.hacking.variety.Soap array abuse
action.hacking.variety.Special element injection
action.hacking.variety.SQLi
action.hacking.variety.SSI injection
action.hacking.variety.URL redirector abuse
action.hacking.variety.Use of backdoor or C2
action.hacking.variety.Use of stolen creds
action.hacking.variety.XML attribute blowup
action.hacking.variety.XML entity expansion
action.hacking.variety.XML external entities
action.hacking.variety.XML injection
action.hacking.variety.XPath injection
action.hacking.variety.XQuery injection
action.hacking.variety.Virtual machine escape
action.hacking.variety.Unknown
action.hacking.variety.Other
action.physical.vector.Privileged access
action.physical.vector.Visitor privileges
action.physical.vector.Bypassed controls
action.physical.vector.Disabled controls
action.physical.vector.Uncontrolled location
action.physical.vector.Unknown
action.physical.vector.Other
action.physical.location.Partner facility
action.physical.location.Partner vehicle
action.physical.location.Personal residence
action.physical.location.Personal vehicle
action.physical.location.Public facility
action.physical.location.Public vehicle
action.physical.location.Victim secure area
action.physical.location.Victim work area
action.physical.location.Victim public area
action.physical.location.Victim grounds
action.physical.location.Unknown
action.physical.location.Other
action.physical.variety.Assault
action.physical.variety.Sabotage
action.physical.variety.Snooping
action.physical.variety.Surveillance
action.physical.variety.Tampering
action.physical.variety.Theft
action.physical.variety.Wiretapping
action.physical.variety.Connection
action.physical.variety.Unknown
action.physical.variety.Other
timeline.unit.NA
timeline.unit.Seconds
timeline.unit.Minutes
timeline.unit.Hours
timeline.unit.Days
timeline.unit.Weeks
timeline.unit.Months
timeline.unit.Years
timeline.unit.Never
timeline.unit.Unknown
