ÌÇÐÄÆƽâ°æ

Sighting report/indicator sharing: Reporting of suspected and confirmed indicators of compromise (for example, IP addresses and domain names).

Malicious email: An email sent with the malicious intent to gain unauthorized access to a network, account, database or website.

Scanning, reconnaissance (recon), brute force: Unauthorized scanning of network ports and systematic attempts to guess passwords through repeated attempts.

Data exposure, theft or leak: Unauthorized access, use or disclosure of official information.

Compromised system: A system on which an actor has accessed or modified a network, account, database or website without authorization.

Denial of Service: Deliberate or accidental action of overloading, interrupting or shutting down of services temporarily or permanently, preventing legitimate users from accessing a service.

Other: Reports that do not meet any of the above malicious cyber-specific criteria (for example, domain squatting and domain spoofing).