Enum: ThreatActorTypeIdEnum
The normalized datastore resource type identifier.
URI: ocsf:ThreatActorTypeIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| UNKNOWN | None | The threat actor type is unknown |
| NATION_STATE | None | Nation-state |
| CYBERCRIMINAL | None | Cybercriminal |
| HACKTIVISTS | None | Hacktivists |
| INSIDER | None | Insider |
| OTHER | None | The threat actor type is not mapped |
Slots
| Name | Description |
|---|---|
| type_id | The normalized datastore resource type identifier |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: ThreatActorTypeIdEnum
description: The normalized datastore resource type identifier.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
UNKNOWN:
text: UNKNOWN
description: The threat actor type is unknown.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
NATION_STATE:
text: NATION_STATE
description: Nation-state
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Nation-state
CYBERCRIMINAL:
text: CYBERCRIMINAL
description: Cybercriminal
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: Cybercriminal
HACKTIVISTS:
text: HACKTIVISTS
description: Hacktivists
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Hacktivists
INSIDER:
text: INSIDER
description: Insider
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: Insider
OTHER:
text: OTHER
description: The threat actor type is not mapped.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other