"type","friendlyname","friendlydescription","officialname","officialdescription"
"2",Access Invalidation,Access Invalidation,Access Invalidation,Access Invalidation
"2",Data Encryption (Clients),Data Encryption (Clients),Data Encryption (Clients),Data Encryption (Clients)
"1",Account Manipulation,Account Manipulation,Account Manipulation,Account Manipulation
"2",Message Encryption,Message Encryption,Message Encryption,Message Encryption
"2",Data Encryption (Devices),Data Encryption (Devices),Data Encryption (Devices),Data Encryption (Devices)
"2",Hardware Eviction,Hardware Eviction,Hardware Eviction,Hardware Eviction
"1",Access Ticket Theft,Access Ticket Theft,Access Ticket Theft,Access Ticket Theft
"2",Reboot,Reboot,Reboot,Reboot
"2",Session Time Analysis,Session Time Analysis,Session Time Analysis,Session Time Analysis
"1",Code Injection,Code Injection,Code Injection,Code Injection
"2",Shutdown,Shutdown,Shutdown,Shutdown
"2",Data Reduction,Data Reduction,Data Reduction,Data Reduction
"1",Native Code Execution,Native Code Execution,Native Code Execution,Native Code Execution
"2",Process Isolation,Process Isolation,Process Isolation,Process Isolation
"2",Least Privilege,Least Privilege,Least Privilege,Least Privilege
"2",Decoy System,Decoy System,Decoy System,Decoy System
"1",Device I/O Capture,Device I/O Capture,Device I/O Capture,Device I/O Capture
"1",Input Data Manipulation,Input Data Manipulation,Input Data Manipulation,Input Data Manipulation
"1",Message Theft,Message Theft,Message Theft,Message Theft
"1",Remote Mobile Wipe,Remote Mobile Wipe,Remote Mobile Wipe,Remote Mobile Wipe
"1",USB Attack on Mobile,USB Attack on Mobile,USB Attack on Mobile,USB Attack on Mobile
"2",User Data Transfer Analysis,User Data Transfer Analysis,User Data Transfer Analysis,User Data Transfer Analysis
"2",System Call Analysis,System Call Analysis,System Call Analysis,System Call Analysis
"2",Authorization Analysis,Authorization Analysis,Authorization Analysis,Authorization Analysis
"2",Endpoint Health Check,Endpoint Health Check,Endpoint Health Check,Endpoint Health Check
"1",Webcam Capture,Webcam Capture,Webcam Capture,Webcam Capture
"2",DoS Protection,DoS Protection,DoS Protection,DoS Protection
"1",Website Defacement,Website Defacement,Website Defacement,Website Defacement
"2",Firmware Monitoring,Firmware Monitoring,Firmware Monitoring,Firmware Monitoring
"2",Backup Recovery,Backup Recovery,Backup Recovery,Backup Recovery
"2",Firmware Behavior Analysis,Firmware Behavior Analysis,Firmware Behavior Analysis,Firmware Behavior Analysis
"2",Memory Execution Prevention,Memory Execution Prevention,Memory Execution Prevention,Memory Execution Prevention
"2",Memory Address Randomization,Memory Address Randomization,Memory Address Randomization,Memory Address Randomization
"1",User Data Manipulation,User Data Manipulation,User Data Manipulation,User Data Manipulation
"2",Memory Validation,Memory Validation,Memory Validation,Memory Validation
"2",Separation of Duties,Separation of Duties,Separation of Duties,Separation of Duties
"2",Message Authentication,Message Authentication,Message Authentication,Message Authentication
"2",Scheduled Job Analysis,Scheduled Job Analysis,Scheduled Job Analysis,Scheduled Job Analysis
"2",Session Lock,Session Lock,Session Lock,Session Lock
"2",Software Install Restriction,Software Install Restriction,Software Install Restriction,Software Install Restriction
"1",Remote Session Hijacking,Remote Session Hijacking,Remote Session Hijacking,Remote Session Hijacking
"2",Remote Terminal Detection,Remote Terminal Detection,Remote Terminal Detection,Remote Terminal Detection
"1",Net Connection Discovery,Net Connection Discovery,Net Connection Discovery,Net Connection Discovery
"1",Pretexting,Pretexting,Pretexting,Pretexting
"1",Whaling,Whaling,Whaling,Whaling
"1",User Data Encryption,User Data Encryption,User Data Encryption,User Data Encryption
"1",Script Execution,Script Execution,Script Execution,Script Execution
"1",Automated Exfiltration,Automated Exfiltration,Automated Exfiltration,Automated Exfiltration
"1",Network Service Discovery,Network Service Discovery,Network Service Discovery,Network Service Discovery
"1",File Removal,File Removal,File Removal,File Removal
"2",Geolocation Analysis,Geolocation Analysis,Geolocation Analysis,Geolocation Analysis
"1",Dashboard Data Capture,Dashboard Data Capture,Dashboard Data Capture,Dashboard Data Capture
"1",Hooking,Hooking,Hooking,Hooking
"1",Domain Policy Manipulation,Domain Policy Manipulation,Domain Policy Manipulation,Domain Policy Manipulation
"2",File Removal,File Removal,File Removal,File Removal
"1",Device Update Mode,Device Update Mode,Device Update Mode,Device Update Mode
"2",One-Time Password,One-Time Password,One-Time Password,One-Time Password
"2",Counter-Command,Counter-Command,Counter-Command,Counter-Command
"2",Encrypted Tunnel,Encrypted Tunnel,Encrypted Tunnel,Encrypted Tunnel
"2",Platform Integrity Check,Platform Integrity Check,Platform Integrity Check,Platform Integrity Check
"1",Cloud Backup Theft,Cloud Backup Theft,Cloud Backup Theft,Cloud Backup Theft
"2",Self-Modification Detection,Self-Modification Detection,Self-Modification Detection,Self-Modification Detection
"2",Memory Bounds Tracking,Memory Bounds Tracking,Memory Bounds Tracking,Memory Bounds Tracking
"2",Security Response Training,Security Response Training,Security Response Training,Security Response Training
"2",Traffic Relay Detection,Traffic Relay Detection,Traffic Relay Detection,Traffic Relay Detection
"2",Configuration Recovery,Configuration Recovery,Configuration Recovery,Configuration Recovery
"2",Decoy Account,Decoy Account,Decoy Account,Decoy Account
"2",Database Query Analysis,Database Query Analysis,Database Query Analysis,Database Query Analysis
"2",Remote Execution Analysis,Remote Execution Analysis,Remote Execution Analysis,Remote Execution Analysis
"2",DNS Traffic Analysis,DNS Traffic Analysis,DNS Traffic Analysis,DNS Traffic Analysis
"2",Memory Comparison,Memory Comparison,Memory Comparison,Memory Comparison
"2",Network Activity Analysis,Network Activity Analysis,Network Activity Analysis,Network Activity Analysis
"2",Pointer Authentication,Pointer Authentication,Pointer Authentication,Pointer Authentication
"2",Process Termination,Process Termination,Process Termination,Process Termination
"2",Protocol Metadata Analysis,Protocol Metadata Analysis,Protocol Metadata Analysis,Protocol Metadata Analysis
"2",Session Volume Analysis,Session Volume Analysis,Session Volume Analysis,Session Volume Analysis
"2",URL Analysis,URL Analysis,URL Analysis,URL Analysis
"2",Traffic Shellcode Detection,Traffic Shellcode Detection,Traffic Shellcode Detection,Traffic Shellcode Detection
"2",Traffic Ratio Analysis,Traffic Ratio Analysis,Traffic Ratio Analysis,Traffic Ratio Analysis
"2",Traffic Filtering (Inbound),Traffic Filtering (Inbound),Traffic Filtering (Inbound),Traffic Filtering (Inbound)
"2",Traffic Filtering (Outbound),Traffic Filtering (Outbound),Traffic Filtering (Outbound),Traffic Filtering (Outbound)
"2",System Daemon Monitoring,System Daemon Monitoring,System Daemon Monitoring,System Daemon Monitoring
"1",Runtime Download,Runtime Download,Runtime Download,Runtime Download
"1",Mobile Activity Fraud,Mobile Activity Fraud,Mobile Activity Fraud,Mobile Activity Fraud
"1",File Hiding,File Hiding,File Hiding,File Hiding
"1",Masquerading,Masquerading,Masquerading,Masquerading
"1",Multi-Factor Interception,Multi-Factor Interception,Multi-Factor Interception,Multi-Factor Interception
"1",Mobile Settings Manipulation,Mobile Settings Manipulation,Mobile Settings Manipulation,Mobile Settings Manipulation
"2",File Access Analysis,File Access Analysis,File Access Analysis,File Access Analysis
"1",Malicious App Removal,Malicious App Removal,Malicious App Removal,Malicious App Removal
"1",Phishing (Recon),Phishing (Recon),Phishing (Recon),Phishing (Recon)
"1",Rogue Device Master,Rogue Device Master,Rogue Device Master,Rogue Device Master
"2",Session Termination,Session Termination,Session Termination,Session Termination
"1",Shared File Manipulation,Shared File Manipulation,Shared File Manipulation,Shared File Manipulation
"1",App Icon Hiding,App Icon Hiding,App Icon Hiding,App Icon Hiding
"1",Malicious File,Malicious File,Malicious File,Malicious File
"2",Access Control,Access Control,Access Control,Access Control
"1",Denial of Service (Host),Denial of Service (Host),Denial of Service (Host),Denial of Service (Host)
"2",User Access Pattern Analysis,User Access Pattern Analysis,User Access Pattern Analysis,User Access Pattern Analysis
"1",Endpoint Info Gathering,Endpoint Info Gathering,Endpoint Info Gathering,Endpoint Info Gathering
"2",Binary Verification,Binary Verification,Binary Verification,Binary Verification
"1",Command Exec. Hiding,Command Exec. Hiding,Command Exec. Hiding,Command Exec. Hiding
"1",Discovery Scan,Discovery Scan,Discovery Scan,Discovery Scan
"1",Exploit (Elevation),Exploit (Elevation),Exploit (Elevation),Exploit (Elevation)
"1",File Permissions Mod.,File Permissions Mod.,File Permissions Mod.,File Permissions Mod.
"1",Pass the Hash,Pass the Hash,Pass the Hash,Pass the Hash
"1",Phone Billing Fraud,Phone Billing Fraud,Phone Billing Fraud,Phone Billing Fraud
"1",Vulnerability Scan,Vulnerability Scan,Vulnerability Scan,Vulnerability Scan
"1",User Execution,User Execution,User Execution,User Execution
"1",Supply Chain Compromise,Supply Chain Compromise,Supply Chain Compromise,Supply Chain Compromise
"1",Process Discovery,Process Discovery,Process Discovery,Process Discovery
"1",Scheduled Task,Scheduled Task,Scheduled Task,Scheduled Task
"1",Access Token Theft,Access Token Theft,Access Token Theft,Access Token Theft
"1",Device Mode Change,Device Mode Change,Device Mode Change,Device Mode Change
"1",Encryption Weakening,Encryption Weakening,Encryption Weakening,Encryption Weakening
"1",Malicious USB Drive,Malicious USB Drive,Malicious USB Drive,Malicious USB Drive
"1",System Info Discovery,System Info Discovery,System Info Discovery,System Info Discovery
"1",Sniffing,Sniffing,Sniffing,Sniffing
"1",Man in the Middle,Man in the Middle,Man in the Middle,Man in the Middle
"1",Device Tasking Change,Device Tasking Change,Device Tasking Change,Device Tasking Change
"2",Decoy Data,Decoy Data,Decoy Data,Decoy Data
"1",Device Telemetry Blocking,Device Telemetry Blocking,Device Telemetry Blocking,Device Telemetry Blocking
"1",Device Telemetry Forgery,Device Telemetry Forgery,Device Telemetry Forgery,Device Telemetry Forgery
"1",App Input Capture,App Input Capture,App Input Capture,App Input Capture
"1",Piggybacking,Piggybacking,Piggybacking,Piggybacking
"1",Traffic Signaling,Traffic Signaling,Traffic Signaling,Traffic Signaling
"1",Device Mode Detection,Device Mode Detection,Device Mode Detection,Device Mode Detection
"1",Function Execution,Function Execution,Function Execution,Function Execution
"1",Triggered Command Execution,Triggered Command Execution,Triggered Command Execution,Triggered Command Execution
"1",Channel Encryption,Channel Encryption,Channel Encryption,Channel Encryption
"1",Device Alarm Suppression,Device Alarm Suppression,Device Alarm Suppression,Device Alarm Suppression
"1",Drive-By Compromise,Drive-By Compromise,Drive-By Compromise,Drive-By Compromise
"1",Remote Access,Remote Access,Remote Access,Remote Access
"1",Control Traffic Hiding,Control Traffic Hiding,Control Traffic Hiding,Control Traffic Hiding
"1",Inter-Process Comm.,Inter-Process Comm.,Inter-Process Comm.,Inter-Process Comm.
"2",Multi-Factor Authentication,Multi-Factor Authentication,Multi-Factor Authentication,Multi-Factor Authentication
"1",Indirect Command Execution,Indirect Command Execution,Indirect Command Execution,Indirect Command Execution
"1",Log Deletion,Log Deletion,Log Deletion,Log Deletion
"1",Trusted App Abuse,Trusted App Abuse,Trusted App Abuse,Trusted App Abuse
"1",Browser Extension,Browser Extension,Browser Extension,Browser Extension
"1",Cloud Service Discovery,Cloud Service Discovery,Cloud Service Discovery,Cloud Service Discovery
"1",File Obfuscation,File Obfuscation,File Obfuscation,File Obfuscation
"1",Cloud Infra. Discovery,Cloud Infra. Discovery,Cloud Infra. Discovery,Cloud Infra. Discovery
"1",Cookie Theft,Cookie Theft,Cookie Theft,Cookie Theft
"1",Management App Abuse,Management App Abuse,Management App Abuse,Management App Abuse
"1",Man in the Browser,Man in the Browser,Man in the Browser,Man in the Browser
"1",Microphone Capture,Microphone Capture,Microphone Capture,Microphone Capture
"1",Scheduled Download,Scheduled Download,Scheduled Download,Scheduled Download
"1",System Data Destruction,System Data Destruction,System Data Destruction,System Data Destruction
"1",Account Compromise,Account Compromise,Account Compromise,Account Compromise
"1",Admin Prompt Bypass,Admin Prompt Bypass,Admin Prompt Bypass,Admin Prompt Bypass
"1",Deployment Tool Abuse,Deployment Tool Abuse,Deployment Tool Abuse,Deployment Tool Abuse
"1",Malicious Attachment,Malicious Attachment,Malicious Attachment,Malicious Attachment
"1",Wireless Conn. Abuse,Wireless Conn. Abuse,Wireless Conn. Abuse,Wireless Conn. Abuse
"1",Information Procurement,Information Procurement,Information Procurement,Information Procurement
"1",System Service Manipulation,System Service Manipulation,System Service Manipulation,System Service Manipulation
"1",Firmware Corruption,Firmware Corruption,Firmware Corruption,Firmware Corruption
"1",Permissions Discovery,Permissions Discovery,Permissions Discovery,Permissions Discovery
"1",Device Program Download,Device Program Download,Device Program Download,Device Program Download
"1",Resource Hijacking,Resource Hijacking,Resource Hijacking,Resource Hijacking
"1",Device Param. Manipulation,Device Param. Manipulation,Device Param. Manipulation,Device Param. Manipulation
"1",Window Discovery,Window Discovery,Window Discovery,Window Discovery
"1",Mobile Location Tracking,Mobile Location Tracking,Mobile Location Tracking,Mobile Location Tracking
"1",Exploit (Evasion),Exploit (Evasion),Exploit (Evasion),Exploit (Evasion)
"1",Mobile Info Discovery,Mobile Info Discovery,Mobile Info Discovery,Mobile Info Discovery
"1",Random Domains,Random Domains,Random Domains,Random Domains
"1",Registry Querying,Registry Querying,Registry Querying,Registry Querying
"1",Credentials Theft,Credentials Theft,Credentials Theft,Credentials Theft
"1",Shutdown,Shutdown,Shutdown,Shutdown
"1",Window Hiding,Window Hiding,Window Hiding,Window Hiding
"2",Certificate Analysis,Certificate Analysis,Certificate Analysis,Certificate Analysis
"2",Data Encryption (Servers),Data Encryption (Servers),Data Encryption (Servers),Data Encryption (Servers)
"2",Dead Code Elimination,Dead Code Elimination,Dead Code Elimination,Dead Code Elimination
"2",Operational DB Monitoring,Operational DB Monitoring,Operational DB Monitoring,Operational DB Monitoring
"2",File Carving,File Carving,File Carving,File Carving
"2",Process Spawn Analysis,Process Spawn Analysis,Process Spawn Analysis,Process Spawn Analysis
"2",File Signature Check,File Signature Check,File Signature Check,File Signature Check
"2",File Usage Pattern Analysis,File Usage Pattern Analysis,File Usage Pattern Analysis,File Usage Pattern Analysis
"2",Input Device Analysis,Input Device Analysis,Input Device Analysis,Input Device Analysis
"2",IPC Traffic Analysis,IPC Traffic Analysis,IPC Traffic Analysis,IPC Traffic Analysis
"2",Logon Attempt Limit,Logon Attempt Limit,Logon Attempt Limit,Logon Attempt Limit
"2",Memory Execution Analysis,Memory Execution Analysis,Memory Execution Analysis,Memory Execution Analysis
"2",Script Execution Analysis,Script Execution Analysis,Script Execution Analysis,Script Execution Analysis
"2",Sender Authentication,Sender Authentication,Sender Authentication,Sender Authentication
"2",Sender Trust Analysis,Sender Trust Analysis,Sender Trust Analysis,Sender Trust Analysis
"2",System File Analysis,System File Analysis,System File Analysis,System File Analysis
"2",Web Activity Analysis,Web Activity Analysis,Web Activity Analysis,Web Activity Analysis
"2",Traffic Metadata Analysis,Traffic Metadata Analysis,Traffic Metadata Analysis,Traffic Metadata Analysis
"2",Traffic Analysis,Traffic Analysis,Traffic Analysis,Traffic Analysis
"2",Account Monitoring,Account Monitoring,Account Monitoring,Account Monitoring
"2",Authentication Analysis,Authentication Analysis,Authentication Analysis,Authentication Analysis
"2",Code Analysis,Code Analysis,Code Analysis,Code Analysis
"2",Decoy Network,Decoy Network,Decoy Network,Decoy Network
"2",Homoglyph Detection,Homoglyph Detection,Homoglyph Detection,Homoglyph Detection
"1",Login Impersonation,Login Impersonation,Login Impersonation,Login Impersonation
"2",Re-Authentication,Re-Authentication,Re-Authentication,Re-Authentication
"2",DNS Whitelisting,DNS Whitelisting,DNS Whitelisting,DNS Whitelisting
"2",Vulnerability Scan,Vulnerability Scan,Vulnerability Scan,Vulnerability Scan
"2",Usage Restriction,Usage Restriction,Usage Restriction,Usage Restriction
"2",Software Use Restriction,Software Use Restriction,Software Use Restriction,Software Use Restriction
