google-api-python-client 2.169.0__py3-none-any.whl → 2.171.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -2003,7 +2003,7 @@
 }
 }
 },
-"revision": "20250411",
+"revision": "20250519",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -3383,6 +3383,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -3403,6 +3410,33 @@
 },
 "type": "object"
 },
+"FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "Finding",
@@ -6063,6 +6097,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -6083,6 +6124,33 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "GoogleCloudSecuritycenterV2FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "GoogleCloudSecuritycenterV2Finding",
@@ -6778,7 +6846,8 @@
 "CONTAINER",
 "DATA",
 "IDENTITY_AND_ACCESS",
-"VULNERABILITY"
+"VULNERABILITY",
+"THREAT"
 ],
 "enumDescriptions": [
 "Unspecified domain category.",
@@ -6787,7 +6856,8 @@
 "Issues in the container domain.",
 "Issues in the data domain.",
 "Issues in the identity and access domain.",
-"Issues in the vulnerability domain."
+"Issues in the vulnerability domain.",
+"Issues in the threat domain."
 ],
 "type": "string"
 }
@@ -7274,18 +7344,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -7293,7 +7373,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -7301,6 +7386,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -7313,6 +7400,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -7320,10 +7408,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -7338,12 +7430,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -7351,35 +7454,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -7387,7 +7509,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -7395,6 +7522,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -7407,6 +7536,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -7414,10 +7544,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -7432,12 +7566,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -7445,18 +7590,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -7507,18 +7661,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -7526,7 +7690,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -7534,6 +7703,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -7546,6 +7717,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -7553,10 +7725,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -7571,12 +7747,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -7584,35 +7771,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -7620,7 +7826,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -7628,6 +7839,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -7640,6 +7853,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -7647,10 +7861,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -7665,12 +7883,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -7678,18 +7907,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -9075,18 +9313,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -9094,7 +9342,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -9102,6 +9355,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -9114,6 +9369,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -9121,10 +9377,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -9139,12 +9399,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -9152,35 +9423,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -9188,7 +9478,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -9196,6 +9491,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -9208,6 +9505,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -9215,10 +9513,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -9233,12 +9535,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -9246,18 +9559,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -9308,18 +9630,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
+"PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -9327,7 +9659,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -9335,6 +9672,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -9347,6 +9686,7 @@
 "INGRESS_TOOL_TRANSFER",
 "NATIVE_API",
 "BRUTE_FORCE",
+"AUTOMATED_COLLECTION",
 "SHARED_MODULES",
 "DATA_ENCODING",
 "STANDARD_ENCODING",
@@ -9354,10 +9694,14 @@
 "TOKEN_IMPERSONATION_OR_THEFT",
 "CREATE_ACCOUNT",
 "LOCAL_ACCOUNT",
+"DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -9372,12 +9716,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
+"BASH_HISTORY",
+"PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
+"CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -9385,35 +9740,54 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
+"DEVELOP_CAPABILITIES",
+"DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
+"OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"REFLECTIVE_CODE_LOADING",
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
+"T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -9421,7 +9795,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -9429,6 +9808,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -9441,6 +9822,7 @@
 "T1105",
 "T1106",
 "T1110",
+"T1119",
 "T1129",
 "T1132",
 "T1132.001",
@@ -9448,10 +9830,14 @@
 "T1134.001",
 "T1136",
 "T1136.001",
+"T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -9466,12 +9852,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
+"T1552.003",
+"T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
+"T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -9479,18 +9876,27 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
+"T1587",
+"T1587.001",
 "T1588",
+"T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
-"T1649"
+"T1620",
+"T1649",
+"T1657"
 ],
 "type": "string"
 },