Skip to content

Commit 449128b

Browse files
authored
Merge pull request #418 from ccl0utier/main
Add additional use cases and missing D3FEND techniques
2 parents 2df94ae + dc94868 commit 449128b

File tree

1 file changed

+242
-8
lines changed

1 file changed

+242
-8
lines changed

contentctl/objects/playbook_tags.py

Lines changed: 242 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,13 @@ class PlaybookProduct(str, enum.Enum):
1010

1111

1212
class PlaybookUseCase(str, enum.Enum):
13-
PHISHING = "Phishing"
13+
COLLECTION = "Collection"
1414
ENDPOINT = "Endpoint"
1515
ENRICHMENT = "Enrichment"
16+
MALWARE = "Malware"
17+
PHISHING = "Phishing"
18+
RESPONSE = "Response"
19+
UTILITY = "Utility"
1620

1721

1822
class PlaybookType(str, enum.Enum):
@@ -26,20 +30,250 @@ class VpeType(str, enum.Enum):
2630

2731

2832
class DefendTechnique(str, enum.Enum):
33+
D3_AA = "D3-AA"
34+
D3_ABPI = "D3-ABPI"
35+
D3_ACA = "D3-ACA"
36+
D3_ACH = "D3-ACH"
37+
D3_AH = "D3-AH"
38+
D3_AI = "D3-AI"
2939
D3_AL = "D3-AL"
30-
D3_DNSDL = "D3-DNSDL"
40+
D3_ALLM = "D3-ALLM"
41+
D3_AM = "D3-AM"
42+
D3_AMED = "D3-AMED"
43+
D3_ANAA = "D3-ANAA"
44+
D3_ANCI = "D3-ANCI"
45+
D3_ANET = "D3-ANET"
46+
D3_APA = "D3-APA"
47+
D3_APLM = "D3-APLM"
48+
D3_AVE = "D3-AVE"
49+
D3_AZET = "D3-AZET"
50+
D3_BA = "D3-BA"
51+
D3_BAN = "D3-BAN"
52+
D3_BDI = "D3-BDI"
53+
D3_BSE = "D3-BSE"
54+
D3_CA = "D3-CA"
55+
D3_CAA = "D3-CAA"
56+
D3_CBAN = "D3-CBAN"
57+
D3_CCSA = "D3-CCSA"
58+
D3_CE = "D3-CE"
59+
D3_CERO = "D3-CERO"
60+
D3_CF = "D3-CF"
61+
D3_CFC = "D3-CFC"
62+
D3_CH = "D3-CH"
63+
D3_CHN = "D3-CHN"
64+
D3_CI = "D3-CI"
65+
D3_CIA = "D3-CIA"
66+
D3_CM = "D3-CM"
67+
D3_CNE = "D3-CNE"
68+
D3_CNR = "D3-CNR"
69+
D3_CNS = "D3-CNS"
70+
D3_CP = "D3-CP"
71+
D3_CQ = "D3-CQ"
72+
D3_CR = "D3-CR"
73+
D3_CRO = "D3-CRO"
74+
D3_CS = "D3-CS"
75+
D3_CSPP = "D3-CSPP"
76+
D3_CTS = "D3-CTS"
77+
D3_CV = "D3-CV"
3178
D3_DA = "D3-DA"
79+
D3_DAM = "D3-DAM"
80+
D3_DCE = "D3-DCE"
81+
D3_DE = "D3-DE"
82+
D3_DEM = "D3-DEM"
83+
D3_DENCR = "D3-DENCR"
84+
D3_DF = "D3-DF"
85+
D3_DI = "D3-DI"
86+
D3_DKE = "D3-DKE"
87+
D3_DKF = "D3-DKF"
88+
D3_DKP = "D3-DKP"
89+
D3_DLIC = "D3-DLIC"
90+
D3_DNR = "D3-DNR"
91+
D3_DNRA = "D3-DNRA"
92+
D3_DNSAL = "D3-DNSAL"
93+
D3_DNSCE = "D3-DNSCE"
94+
D3_DNSDL = "D3-DNSDL"
95+
D3_DNSTA = "D3-DNSTA"
96+
D3_DO = "D3-DO"
97+
D3_DP = "D3-DP"
98+
D3_DPLM = "D3-DPLM"
99+
D3_DPR = "D3-DPR"
100+
D3_DQSA = "D3-DQSA"
101+
D3_DRT = "D3-DRT"
102+
D3_DST = "D3-DST"
103+
D3_DTP = "D3-DTP"
104+
D3_DUC = "D3-DUC"
105+
D3_EAL = "D3-EAL"
106+
D3_EBWSAM = "D3-EBWSAM"
107+
D3_EDL = "D3-EDL"
108+
D3_EF = "D3-EF"
109+
D3_EFA = "D3-EFA"
110+
D3_EHB = "D3-EHB"
111+
D3_EHPV = "D3-EHPV"
112+
D3_EI = "D3-EI"
113+
D3_ER = "D3-ER"
114+
D3_ET = "D3-ET"
115+
D3_FA = "D3-FA"
116+
D3_FAPA = "D3-FAPA"
117+
D3_FBA = "D3-FBA"
118+
D3_FC = "D3-FC"
119+
D3_FCA = "D3-FCA"
120+
D3_FCDC = "D3-FCDC"
121+
D3_FCOA = "D3-FCOA"
122+
D3_FCR = "D3-FCR"
123+
D3_FE = "D3-FE"
124+
D3_FEMC = "D3-FEMC"
125+
D3_FEV = "D3-FEV"
126+
D3_FFV = "D3-FFV"
127+
D3_FH = "D3-FH"
128+
D3_FHRA = "D3-FHRA"
129+
D3_FIM = "D3-FIM"
130+
D3_FISV = "D3-FISV"
131+
D3_FMBV = "D3-FMBV"
132+
D3_FMCV = "D3-FMCV"
133+
D3_FMVV = "D3-FMVV"
134+
D3_FRDDL = "D3-FRDDL"
135+
D3_FRIDL = "D3-FRIDL"
136+
D3_FV = "D3-FV"
137+
D3_HBPI = "D3-HBPI"
138+
D3_HCI = "D3-HCI"
139+
D3_HD = "D3-HD"
140+
D3_HDDL = "D3-HDDL"
141+
D3_HDL = "D3-HDL"
142+
D3_HR = "D3-HR"
143+
D3_HS = "D3-HS"
32144
D3_IAA = "D3-IAA"
145+
D3_IBCA = "D3-IBCA"
146+
D3_ID = "D3-ID"
147+
D3_IDA = "D3-IDA"
148+
D3_IHN = "D3-IHN"
149+
D3_IOPR = "D3-IOPR"
150+
D3_IPCTA = "D3-IPCTA"
151+
D3_IPRA = "D3-IPRA"
33152
D3_IRA = "D3-IRA"
153+
D3_IRV = "D3-IRV"
154+
D3_ISVA = "D3-ISVA"
155+
D3_ITF = "D3-ITF"
156+
D3_JFAPA = "D3-JFAPA"
157+
D3_KBPI = "D3-KBPI"
158+
D3_LAM = "D3-LAM"
159+
D3_LAMED = "D3-LAMED"
160+
D3_LFAM = "D3-LFAM"
161+
D3_LFP = "D3-LFP"
162+
D3_LLM = "D3-LLM"
163+
D3_MA = "D3-MA"
164+
D3_MAN = "D3-MAN"
165+
D3_MBSV = "D3-MBSV"
166+
D3_MBT = "D3-MBT"
167+
D3_MENCR = "D3-MENCR"
168+
D3_MFA = "D3-MFA"
169+
D3_MH = "D3-MH"
170+
D3_NAM = "D3-NAM"
171+
D3_NI = "D3-NI"
172+
D3_NM = "D3-NM"
173+
D3_NNI = "D3-NNI"
174+
D3_NPC = "D3-NPC"
175+
D3_NRAM = "D3-NRAM"
176+
D3_NTA = "D3-NTA"
177+
D3_NTCD = "D3-NTCD"
178+
D3_NTF = "D3-NTF"
179+
D3_NTPM = "D3-NTPM"
180+
D3_NTSA = "D3-NTSA"
181+
D3_NVA = "D3-NVA"
182+
D3_OAM = "D3-OAM"
183+
D3_ODM = "D3-ODM"
184+
D3_OE = "D3-OE"
185+
D3_OM = "D3-OM"
186+
D3_ORA = "D3-ORA"
187+
D3_OSM = "D3-OSM"
34188
D3_OTF = "D3-OTF"
35-
D3_ER = "D3-ER"
189+
D3_OTP = "D3-OTP"
190+
D3_PA = "D3-PA"
191+
D3_PAM = "D3-PAM"
192+
D3_PAN = "D3-PAN"
193+
D3_PBWSAM = "D3-PBWSAM"
194+
D3_PCA = "D3-PCA"
195+
D3_PCSV = "D3-PCSV"
196+
D3_PE = "D3-PE"
197+
D3_PFV = "D3-PFV"
198+
D3_PH = "D3-PH"
199+
D3_PHDURA = "D3-PHDURA"
200+
D3_PLA = "D3-PLA"
201+
D3_PLLM = "D3-PLLM"
202+
D3_PLM = "D3-PLM"
203+
D3_PM = "D3-PM"
204+
D3_PMAD = "D3-PMAD"
205+
D3_PR = "D3-PR"
206+
D3_PS = "D3-PS"
207+
D3_PSA = "D3-PSA"
208+
D3_PSEP = "D3-PSEP"
209+
D3_PSMD = "D3-PSMD"
210+
D3_PT = "D3-PT"
211+
D3_PV = "D3-PV"
212+
D3_PWA = "D3-PWA"
213+
D3_RA = "D3-RA"
214+
D3_RAM = "D3-RAM"
215+
D3_RAPA = "D3-RAPA"
216+
D3_RC = "D3-RC"
217+
D3_RD = "D3-RD"
218+
D3_RDI = "D3-RDI"
36219
D3_RE = "D3-RE"
37-
D3_URA = "D3-URA"
38-
D3_DNRA = "D3-DNRA"
39-
D3_IPRA = "D3-IPRA"
40-
D3_FHRA = "D3-FHRA"
41-
D3_SRA = "D3-SRA"
220+
D3_RF = "D3-RF"
221+
D3_RFAM = "D3-RFAM"
222+
D3_RFS = "D3-RFS"
223+
D3_RIC = "D3-RIC"
224+
D3_RKD = "D3-RKD"
225+
D3_RN = "D3-RN"
226+
D3_RNA = "D3-RNA"
227+
D3_RO = "D3-RO"
228+
D3_RPA = "D3-RPA"
229+
D3_RRID = "D3-RRID"
230+
D3_RS = "D3-RS"
231+
D3_RTA = "D3-RTA"
232+
D3_RTSD = "D3-RTSD"
42233
D3_RUAA = "D3-RUAA"
234+
D3_SAOR = "D3-SAOR"
235+
D3_SBV = "D3-SBV"
236+
D3_SCA = "D3-SCA"
237+
D3_SCF = "D3-SCF"
238+
D3_SCH = "D3-SCH"
239+
D3_SCP = "D3-SCP"
240+
D3_SDA = "D3-SDA"
241+
D3_SDM = "D3-SDM"
242+
D3_SEA = "D3-SEA"
243+
D3_SFA = "D3-SFA"
244+
D3_SFCV = "D3-SFCV"
245+
D3_SFV = "D3-SFV"
246+
D3_SHN = "D3-SHN"
247+
D3_SICA = "D3-SICA"
248+
D3_SJA = "D3-SJA"
249+
D3_SMRA = "D3-SMRA"
250+
D3_SPP = "D3-SPP"
251+
D3_SRA = "D3-SRA"
252+
D3_SSC = "D3-SSC"
253+
D3_ST = "D3-ST"
254+
D3_SU = "D3-SU"
255+
D3_SVCDM = "D3-SVCDM"
256+
D3_SWI = "D3-SWI"
257+
D3_SYSDM = "D3-SYSDM"
258+
D3_SYSM = "D3-SYSM"
259+
D3_SYSVA = "D3-SYSVA"
260+
D3_TAAN = "D3-TAAN"
261+
D3_TB = "D3-TB"
262+
D3_TBA = "D3-TBA"
263+
D3_TBI = "D3-TBI"
264+
D3_TL = "D3-TL"
265+
D3_UA = "D3-UA"
266+
D3_UAP = "D3-UAP"
267+
D3_UBA = "D3-UBA"
268+
D3_UDTA = "D3-UDTA"
269+
D3_UGLPA = "D3-UGLPA"
270+
D3_ULA = "D3-ULA"
271+
D3_URA = "D3-URA"
272+
D3_USICA = "D3-USICA"
273+
D3_VI = "D3-VI"
274+
D3_VTV = "D3-VTV"
275+
D3_WSAA = "D3-WSAA"
276+
D3_WSAM = "D3-WSAM"
43277

44278

45279
class PlaybookTag(BaseModel):

0 commit comments

Comments
 (0)