google-api-python-client 2.170.0__py3-none-any.whl → 2.172.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1.json

@@ -5938,7 +5938,7 @@
 }
 }
 },
-"revision": "20250509",
+"revision": "20250519",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -7697,6 +7697,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -7717,6 +7724,33 @@
 },
 "type": "object"
 },
+"FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "Finding",
@@ -10400,6 +10434,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -10420,6 +10461,33 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "GoogleCloudSecuritycenterV2FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "GoogleCloudSecuritycenterV2Finding",
@@ -11115,7 +11183,8 @@
 "CONTAINER",
 "DATA",
 "IDENTITY_AND_ACCESS",
-"VULNERABILITY"
+"VULNERABILITY",
+"THREAT"
 ],
 "enumDescriptions": [
 "Unspecified domain category.",
@@ -11124,7 +11193,8 @@
 "Issues in the container domain.",
 "Issues in the data domain.",
 "Issues in the identity and access domain.",
-"Issues in the vulnerability domain."
+"Issues in the vulnerability domain.",
+"Issues in the threat domain."
 ],
 "type": "string"
 }
@@ -11611,19 +11681,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -11631,7 +11710,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -11639,6 +11723,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -11661,9 +11747,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -11678,15 +11767,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -11694,6 +11791,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -11701,33 +11800,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -11735,7 +11846,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -11743,6 +11859,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -11765,9 +11883,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -11782,15 +11903,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -11798,6 +11927,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -11805,15 +11936,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -11864,19 +11998,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -11884,7 +12027,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -11892,6 +12040,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -11914,9 +12064,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -11931,15 +12084,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -11947,6 +12108,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -11954,33 +12117,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -11988,7 +12163,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -11996,6 +12176,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -12018,9 +12200,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -12035,15 +12220,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -12051,6 +12244,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -12058,15 +12253,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -13982,19 +14180,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -14002,7 +14209,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -14010,6 +14222,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -14032,9 +14246,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -14049,15 +14266,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -14065,6 +14290,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -14072,33 +14299,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -14106,7 +14345,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -14114,6 +14358,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -14136,9 +14382,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -14153,15 +14402,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -14169,6 +14426,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -14176,15 +14435,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -14235,19 +14497,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -14255,7 +14526,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -14263,6 +14539,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -14285,9 +14563,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -14302,15 +14583,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -14318,6 +14607,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -14325,33 +14616,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -14359,7 +14662,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -14367,6 +14675,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -14389,9 +14699,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -14406,15 +14719,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -14422,6 +14743,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -14429,15 +14752,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },