Group-IB Threat Intelligence (classifier)

Details

ID	`Group-IB Threat Intelligence (classifier)`
Type	classification
Version	-1
From Version	6.10.0
Default Incident Type	—
Feed	No

Key Type Map

Key	Incident Type
`compromised/breached`	GIB Data Breach
`osi/git_repository`	GIB OSI Git Leak
`osi/public_leak`	GIB OSI Public Leak
`compromised/account_group`	GIB Compromised Account Group
`compromised/bank_card_group`	GIB Compromised Card Group
`compromised/mule`	GIB Compromised Mule
`suspicious_ip/vpn`	GIB Suspicious IP VPN
`suspicious_ip/scanner`	GIB Suspicious IP Scanner
`suspicious_ip/tor_node`	GIB Suspicious IP TOR Node
`suspicious_ip/open_proxy`	GIB Suspicious IP Open Proxy
`suspicious_ip/socks_proxy`	GIB Suspicious IP Socks Proxy
`malware/malware`	GIB Malware
`malware/cnc`	GIB Malware CNC
`attacks/ddos`	GIB Attacks DDOS
`attacks/deface`	GIB Attacks Deface
`attacks/phishing_kit`	GIB Attacks Phishing Kit
`attacks/phishing_group`	GIB Attacks Phishing Group
`hi/threat`	GIB Cybercriminal Threat
`hi/threat_actor`	GIB Cybercriminal Threat Actor
`apt/threat_actor`	GIB Nation-State Cybercriminals Threat Actor
`apt/threat`	GIB Nation-State Cybercriminals Threat
`osi/vulnerability`	GIB OSI Vulnerability
`compromised/masked_card`	GIB Compromised Masked Card
`compromised/spd`	GIB SPD

Source

classifier-Group-IB_Threat_Intelligence_classifier.json

Download History Raw

{
    "description": "",
    "feed": false,
    "id": "Group-IB Threat Intelligence (classifier)",
    "keyTypeMap": {
        "compromised/breached": "GIB Data Breach",
        "osi/git_repository": "GIB OSI Git Leak",
        "osi/public_leak": "GIB OSI Public Leak",
        "compromised/account_group": "GIB Compromised Account Group",
        "compromised/bank_card_group": "GIB Compromised Card Group",
        "compromised/mule": "GIB Compromised Mule",
        "suspicious_ip/vpn": "GIB Suspicious IP VPN",
        "suspicious_ip/scanner": "GIB Suspicious IP Scanner",
        "suspicious_ip/tor_node": "GIB Suspicious IP TOR Node",
        "suspicious_ip/open_proxy": "GIB Suspicious IP Open Proxy",
        "suspicious_ip/socks_proxy": "GIB Suspicious IP Socks Proxy",
        "malware/malware": "GIB Malware",
        "malware/cnc": "GIB Malware CNC",
        "attacks/ddos": "GIB Attacks DDOS",
        "attacks/deface": "GIB Attacks Deface",
        "attacks/phishing_kit": "GIB Attacks Phishing Kit",
        "attacks/phishing_group": "GIB Attacks Phishing Group",
        "hi/threat": "GIB Cybercriminal Threat",
        "hi/threat_actor": "GIB Cybercriminal Threat Actor",
        "apt/threat_actor": "GIB Nation-State Cybercriminals Threat Actor",
        "apt/threat": "GIB Nation-State Cybercriminals Threat",
        "osi/vulnerability": "GIB OSI Vulnerability",
        "compromised/masked_card": "GIB Compromised Masked Card",
        "compromised/spd": "GIB SPD"
    },
    "name": "Group-IB Threat Intelligence (classifier)",
    "transformer": {
        "complex": null,
        "simple": "gibType"
    },
    "type": "classification",
    "version": -1,
    "fromVersion": "6.10.0"
}