google-api-python-client 2.169.0__py3-none-any.whl → 2.171.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1.json

@@ -5938,7 +5938,7 @@
 }
 }
 },
-"revision": "20250411",
+"revision": "20250519",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -6967,7 +6967,7 @@
 },
 "end": {
 "$ref": "Position",
-"description": "The end position of the error in the uploaded text version of the module. This field may be omitted if no specific position applies, or if one could not be computed.."
+"description": "The end position of the error in the uploaded text version of the module. This field may be omitted if no specific position applies, or if one could not be computed."
 },
 "fieldPath": {
 "description": "The path, in RFC 8901 JSON Pointer format, to the field that failed validation. This may be left empty if no specific field is affected.",
@@ -6985,6 +6985,7 @@
 "id": "CustomModuleValidationErrors",
 "properties": {
 "errors": {
+"description": "The list of errors.",
 "items": {
 "$ref": "CustomModuleValidationError"
 },
@@ -7696,6 +7697,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -7716,6 +7724,33 @@
 },
 "type": "object"
 },
+"FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "Finding",
@@ -10399,6 +10434,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -10419,6 +10461,33 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "GoogleCloudSecuritycenterV2FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "GoogleCloudSecuritycenterV2Finding",
@@ -11114,7 +11183,8 @@
 "CONTAINER",
 "DATA",
 "IDENTITY_AND_ACCESS",
-"VULNERABILITY"
+"VULNERABILITY",
+"THREAT"
 ],
 "enumDescriptions": [
 "Unspecified domain category.",
@@ -11123,7 +11193,8 @@
 "Issues in the container domain.",
 "Issues in the data domain.",
 "Issues in the identity and access domain.",
-"Issues in the vulnerability domain."
+"Issues in the vulnerability domain.",
+"Issues in the threat domain."
 ],
 "type": "string"
 }
@@ -11610,18 +11681,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -11629,7 +11710,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -11637,6 +11723,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -11649,6 +11737,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -11656,10 +11745,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -11674,12 +11767,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -11687,35 +11791,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -11723,7 +11846,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -11731,6 +11859,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -11743,6 +11873,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -11750,10 +11881,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -11768,12 +11903,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -11781,18 +11927,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -11843,18 +11998,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -11862,7 +12027,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -11870,6 +12040,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -11882,6 +12054,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -11889,10 +12062,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -11907,12 +12084,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -11920,35 +12108,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -11956,7 +12163,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -11964,6 +12176,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -11976,6 +12190,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -11983,10 +12198,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -12001,12 +12220,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -12014,18 +12244,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -13941,18 +14180,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -13960,7 +14209,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -13968,6 +14222,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -13980,6 +14236,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -13987,10 +14244,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -14005,12 +14266,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -14018,35 +14290,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -14054,7 +14345,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -14062,6 +14358,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -14074,6 +14372,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -14081,10 +14380,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -14099,12 +14402,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -14112,18 +14426,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -14174,18 +14497,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -14193,7 +14526,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -14201,6 +14539,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -14213,6 +14553,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -14220,10 +14561,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -14238,12 +14583,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -14251,35 +14607,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -14287,7 +14662,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -14295,6 +14675,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -14307,6 +14689,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -14314,10 +14697,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -14332,12 +14719,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -14345,18 +14743,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -14717,10 +15124,12 @@
 "id": "Position",
 "properties": {
 "columnNumber": {
+"description": "The column number.",
 "format": "int32",
 "type": "integer"
 },
 "lineNumber": {
+"description": "The line number.",
 "format": "int32",
 "type": "integer"
 }