Assets¶

IAMObject
Identity
Privileges
- assume
Group
- assume
- lockoutFromMembers
Credentials
Information
Data
Hardware
SoftwareProduct
Application
IDPS
PhysicalZone
- gainPhysicalAccess
Network
RoutingFirewall
- deny
- fullAccess
ConnectionRule
User
Vulnerability
- attemptAbuse
- abuse
- attemptExploit
- exploit
- impact
SoftwareVulnerability
HardwareVulnerability

IAMObject ¶

notPresent ¶

attemptAssume ¶

successfulAssume ¶

assume ¶

deny ¶

write ¶

attemptLockout ¶

successfulLockout ¶

lockout ¶

Identity ¶

assume ¶

lockoutFromCredentials ¶

lockout ¶

Privileges ¶

assume ¶

Group ¶

assume ¶

lockoutFromMembers ¶

Data ¶

authorizedAccessFromApplication ¶

bypassPayloadInspectionFromEncryptedData ¶

accessUnencryptedData ¶

accessUnsignedData ¶

accessSpoofedData ¶

accessDecryptedData ¶

attemptApplicationRespondConnect ¶

applicationRespondConnect ¶

authorizedApplicationRespondConnectFromApplication ¶

authorizedApplicationRespondConnectFromIAM ¶

authorizedApplicationRespondConnect ¶

attemptRead ¶

successfulRead ¶

read ¶

authorizedReadFromIAM ¶

authorizedReadFromApplication ¶

authorizedRead ¶

attemptWrite ¶

successfulWrite ¶

write ¶

authorizedWriteFromIAM ¶

authorizedWriteFromApplication ¶

authorizedWrite ¶

attemptDelete ¶

successfulDelete ¶

delete ¶

authorizedDeleteFromIAM ¶

authorizedDeleteFromApplication ¶

authorizedDelete ¶

attemptDeny ¶

successfulDeny ¶

deny ¶

denyFromLockout ¶

attemptReverseReach ¶

reverseReach ¶

extract ¶

SoftwareProduct ¶

compromiseApplications ¶

write ¶

readApplications ¶

modifyApplications ¶

denyApplications ¶

Application ¶

notPresent ¶

attemptUseVulnerability ¶

successfulUseVulnerability ¶

useVulnerability ¶

attemptReverseReach ¶

successfulReverseReach ¶

reverseReach ¶

localConnect ¶

networkConnectUninspected ¶

networkConnectInspected ¶

networkConnect ¶

specificAccessNetworkConnect ¶

accessNetworkAndConnections ¶

attemptNetworkConnectFromResponse ¶

networkConnectFromResponse ¶

specificAccessFromLocalConnection ¶

specificAccessFromNetworkConnection ¶

specificAccess ¶

bypassContainerization ¶

authenticate ¶

specificAccessAuthenticate ¶

localAccess ¶

networkAccess ¶

fullAccess ¶

physicalAccessAchieved ¶

attemptUnsafeUserActivity ¶

successfulUnsafeUserActivity ¶

unsafeUserActivity ¶

attackerUnsafeUserActivityCapability ¶

attackerUnsafeUserActivityCapabilityWithReverseReach ¶

attackerUnsafeUserActivityCapabilityWithoutReverseReach ¶

bypassSupplyChainAuditing ¶

supplyChainAuditingBypassed ¶

attemptFullAccessFromSupplyChainCompromise ¶

fullAccessFromSupplyChainCompromise ¶

attemptReadFromSoftProdVulnerability ¶

attemptModifyFromSoftProdVulnerability ¶

attemptDenyFromSoftProdVulnerability ¶

softwareProductVulnerabilityLocalAccessAchieved ¶

softwareProductVulnerabilityNetworkAccessAchieved ¶

softwareProductVulnerabilityPhysicalAccessAchieved ¶

softwareProductVulnerabilityLowPrivilegesAchieved ¶

softwareProductVulnerabilityHighPrivilegesAchieved ¶

softwareProductVulnerabilityUserInteractionAchieved ¶

attemptSoftwareProductAbuse ¶

softwareProductAbuse ¶

readFromSoftProdVulnerability ¶

modifyFromSoftProdVulnerability ¶

denyFromSoftProdVulnerability ¶

attemptApplicationRespondConnectThroughData ¶

successfulApplicationRespondConnectThroughData ¶

applicationRespondConnectThroughData ¶

attemptAuthorizedApplicationRespondConnectThroughData ¶

successfulAuthorizedApplicationRespondConnectThroughData ¶

authorizedApplicationRespondConnectThroughData ¶

attemptRead ¶

successfulRead ¶

read ¶

specificAccessRead ¶

attemptModify ¶

successfulModify ¶

modify ¶

specificAccessModify ¶

attemptDeny ¶

successfulDeny ¶

deny ¶

specificAccessDelete ¶

denyFromNetworkingAsset ¶

denyFromLockout ¶

IDPS ¶

bypassEffectiveness ¶

effectivenessBypassed ¶

fullAccess ¶

deny ¶

PhysicalZone ¶

gainPhysicalAccess ¶

RoutingFirewall ¶

deny ¶

fullAccess ¶

Vulnerability ¶

attemptAbuse ¶

abuse ¶

attemptExploit ¶

exploit ¶

impact ¶

HardwareVulnerability ¶

physicalAccessAchieved ¶

impact ¶

read ¶

modify ¶

deny ¶

attemptExploit ¶

exploitTrivially ¶

exploitWithEffort ¶