Table 2 STIX extensions
From: Human-as-a-security-sensor for harvesting threat intelligence
Classification | Base entity | Additional Entity | Additional attribute |
|---|---|---|---|
Intelligence | TTP | Structural Event | StructuralEventTypeVocab |
TTP | Environmental Event | EnvironmentalEventTypeVocab | |
TTP | Legal Event | LegalEventTypeVocab | |
Attribution | Threat Actor | Structural Source | StructuralSourceTypeVocab |
Incident | |||
Indicator | Observable | Observation |