The AttackerToolTypeVocab-1.0 is the default STIX vocabulary for expressing types of attacker tools.
Note that this vocabulary is under development. Feedback is appreciated and should be sent to the STIX discussion list.
| Item | Description |
|---|---|
| Malware | |
| Penetration Testing | |
| Port Scanner | |
| Traffic Scanner | |
| Vulnerability Scanner | |
| Application Scanner | |
| Password Cracking |
| Field Name | Type | Description |
|---|---|---|
| @vocab_nameoptional | string |
The vocab_name field specifies the name of the controlled vocabulary. |
| @vocab_referenceoptional | anyURI |
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file. |