VERIS

This is a mindmap of the Vocabulary for Event Recording and Incident Sharing (VERIS). VERIS s a set of metrics designed to provide a common language for describing security incidents in a structured and repeatable manner.

Lancez-Vous. C'est gratuit
ou s'inscrire avec votre adresse e-mail
VERIS par Mind Map: VERIS

1. Victim

1.1. victim.victim_id

1.2. victim.industry

1.3. victim.country

1.4. victim.employee_count

1.5. victim.revenue

1.6. victim.locations_affected

1.7. victim.notes

2. Incident

2.1. Actor

2.1.1. external

2.1.1.1. role

2.1.1.2. motive

2.1.1.3. variety

2.1.1.4. country

2.1.1.5. notes

2.1.2. internal

2.1.2.1. role

2.1.2.2. motive

2.1.2.3. variety

2.1.2.4. notes

2.1.3. partner

2.1.3.1. role

2.1.3.2. motive

2.1.3.3. industry

2.1.3.4. country

2.1.3.5. notes

2.1.4. unknown

2.1.4.1. notes

2.2. Action

2.2.1. malware

2.2.1.1. variety

2.2.1.2. vector

2.2.1.3. cve

2.2.1.4. name

2.2.1.5. notes

2.2.2. hacking

2.2.2.1. variety

2.2.2.2. vector

2.2.2.3. cve

2.2.2.4. notes

2.2.3. social

2.2.3.1. variety

2.2.3.2. vector

2.2.3.3. target

2.2.3.4. notes

2.2.4. misuse

2.2.4.1. variety

2.2.4.2. vector

2.2.4.3. notes

2.2.5. physical

2.2.5.1. variety

2.2.5.2. vector

2.2.5.3. location

2.2.5.4. notes

2.2.6. error

2.2.6.1. variety

2.2.6.2. vector

2.2.6.3. notes

2.2.7. environmental

2.2.7.1. variety

2.2.7.2. notes

2.3. Asset

2.3.1. assets

2.3.1.1. variety

2.3.1.1.1. servers

2.3.1.1.2. network

2.3.1.1.3. user devices

2.3.1.1.4. media

2.3.1.1.5. people

2.3.1.2. amount

2.3.2. personal

2.3.3. managed

2.3.4. hosted

2.3.5. country

2.3.6. cloud

2.3.7. notes

2.4. Attribute

2.4.1. confidentiality

2.4.1.1. data_disclosure

2.4.1.2. data_total

2.4.1.3. data

2.4.1.3.1. variety

2.4.1.3.2. amount

2.4.1.4. state

2.4.1.5. notes

2.4.2. integrity

2.4.2.1. variety

2.4.2.2. notes

2.4.3. availability

2.4.3.1. variety

2.4.3.2. duration

2.4.3.2.1. unit

2.4.3.2.2. value

2.4.3.3. notes

3. Tracking

3.1. incident_id

3.2. source_id

3.3. security_compromise

3.4. summary

3.5. related_incidents

3.6. confidence

3.7. notes

4. Response

5. Impact