-
Notifications
You must be signed in to change notification settings - Fork 35
/
model.dot
33 lines (33 loc) · 1.71 KB
/
model.dot
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
digraph ctia {
rankdir=BT;
actor -> ttp [ label = "observed_TTPs" ];
actor -> campaign [ label = "associated_campaigns" ];
actor -> actor [ label = "associated_actors" ];
campaign -> ttp [ label = "related_TTPs" ];
campaign -> incident [ label = "related_incidents" ];
campaign -> actor [ label = "attribution" ];
campaign -> campaign [ label = "associated_campaigns" ];
campaign -> indicator [ label = "indicators" ];
coa -> coa [ label = "related_COAs" ];
exploit_target -> coa [ label = "potential_COAs" ];
exploit_target -> exploit_target [ label = "related_exploit_targets" ];
incident -> coa [ label = "COA_requested" ];
incident -> coa [ label = "COA_taken" ];
incident -> indicator [ label = "related_indicators" ];
incident -> ttp [ label = "leveraged_TTPs" ];
incident -> actor [ label = "attributed_actors" ];
incident -> incident [ label = "related_incidents" ];
indicator -> indicator [ label = "related_indicators" ];
indicator -> ttp [ label = "indicated_TTP" ];
indicator -> coa [ label = "suggested_COAs" ];
indicator -> campaign [ label = "related_campaigns" ];
indicator -> coa [ label = "related_COAs" ];
indicator -> judgement [ label = "judgements" ];
judgement -> indicator [ label = "indicators" ];
sighting -> indicator [ label = "indicators" ];
sighting -> incident [ label = "incidents" ];
ttp -> exploit_target [ label = "exploit_targets" ];
ttp -> ttp [ label = "related_TTPs" ];
ttp -> indicator [ label = "indicators" ];
verdict -> judgement [ label = "judgement_id" ];
}