Capabilities

{
    "associatedToAll": true,
    "associatedTypes": [
        "Malware"
    ],
    "caseInsensitive": true,
    "cliName": "capabilities",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 2,
    "hidden": false,
    "id": "indicator_capabilities",
    "isReadOnly": false,
    "locked": false,
    "name": "Capabilities",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "selectValues": [
        "accesses-remote-machines",
        "anti-debugging",
        "anti-disassembly",
        "anti-emulation",
        "anti-memory-forensics",
        "anti-sandbox",
        "anti-vm",
        "captures-input-peripherals",
        "captures-output-peripherals",
        "captures-system-state-data",
        "cleans-traces-of-infection",
        "commits-fraud",
        "communicates-with-c2",
        "compromises-data-availability",
        "compromises-data-integrity",
        "compromises-system-availability",
        "controls-local-machine",
        "degrades-security-software",
        "degrades-system-updates",
        "determines-c2-server",
        "emails-spam",
        "escalates-privileges",
        "evades-av",
        "exfiltrates-data",
        "fingerprints-host",
        "hides-artifacts",
        "hides-executing-code",
        "infects-files",
        "infects-remote-machines",
        "installs-other-components",
        "persists-after-system-reboot",
        "prevents-artifact-access",
        "prevents-artifact-deletion",
        "probes-network-environment",
        "self-modifies",
        "steals-authentication-credentials",
        "violates-system-operational-integrity"
    ],
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "tagsSelect",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "5.5.0",
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}