Skip to content

Enum: ThreatActorTypeIdEnum

The normalized datastore resource type identifier.

URI: ocsf:ThreatActorTypeIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The threat actor type is unknown
NATION_STATE None Nation-state
CYBERCRIMINAL None Cybercriminal
HACKTIVISTS None Hacktivists
INSIDER None Insider
OTHER None The threat actor type is not mapped

Slots

Name Description
type_id The normalized datastore resource type identifier

Identifier and Mapping Information

Schema Source

LinkML Source

name: ThreatActorTypeIdEnum
description: The normalized datastore resource type identifier.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The threat actor type is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  NATION_STATE:
    text: NATION_STATE
    description: Nation-state
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Nation-state
  CYBERCRIMINAL:
    text: CYBERCRIMINAL
    description: Cybercriminal
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Cybercriminal
  HACKTIVISTS:
    text: HACKTIVISTS
    description: Hacktivists
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Hacktivists
  INSIDER:
    text: INSIDER
    description: Insider
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Insider
  OTHER:
    text: OTHER
    description: The threat actor type is not mapped.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other