Enum: TlpLevelEnum

Closed enumeration of Traffic Light Protocol (TLP) sharing sensitivity levels. The four standard TLP levels control how broadly shared information can be distributed. ATT&CK uses canonical TLP marking definitions with fixed, immutable STIX IDs.

URI: attack:TlpLevelEnum

Permissible Values

Value	Meaning	Description
white	None	TLP:WHITE — unrestricted information sharing
green	None	TLP:GREEN — sharing within the broader community; not for public release
amber	None	TLP:AMBER — limited sharing on a need-to-know basis within the recipient orga...
red	None	TLP:RED — not for disclosure; recipient eyes and ears only

Slots

Name	Description
tlp	The Traffic Light Protocol level assigned by this TLP marking definition

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/attack

LinkML Source

name: TlpLevelEnum
description: Closed enumeration of Traffic Light Protocol (TLP) sharing sensitivity
  levels. The four standard TLP levels control how broadly shared information can
  be distributed. ATT&CK uses canonical TLP marking definitions with fixed, immutable
  STIX IDs.
from_schema: https://w3id.org/lmodel/attack
rank: 1000
permissible_values:
  white:
    text: white
    description: 'TLP:WHITE — unrestricted information sharing. Canonical ID: marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9'
  green:
    text: green
    description: 'TLP:GREEN — sharing within the broader community; not for public
      release. Canonical ID: marking-definition--34098fce-860f-48ae-8e50-ebd3cc5e41da'
  amber:
    text: amber
    description: 'TLP:AMBER — limited sharing on a need-to-know basis within the recipient
      organization. Canonical ID: marking-definition--f88d31f6-486f-44da-b317-01333bde0b82'
  red:
    text: red
    description: 'TLP:RED — not for disclosure; recipient eyes and ears only. Canonical
      ID: marking-definition--5e57c739-391a-4eb3-b6be-7d15ca92d5ed'