google-api-python-client 2.170.0__py3-none-any.whl → 2.172.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta1.json

@@ -913,7 +913,7 @@
 }
 }
 },
-"revision": "20250509",
+"revision": "20250519",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -2286,6 +2286,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -2306,6 +2313,33 @@
 },
 "type": "object"
 },
+"FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "Finding",
@@ -5070,6 +5104,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -5090,6 +5131,33 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "GoogleCloudSecuritycenterV2FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "GoogleCloudSecuritycenterV2Finding",
@@ -5785,7 +5853,8 @@
 "CONTAINER",
 "DATA",
 "IDENTITY_AND_ACCESS",
-"VULNERABILITY"
+"VULNERABILITY",
+"THREAT"
 ],
 "enumDescriptions": [
 "Unspecified domain category.",
@@ -5794,7 +5863,8 @@
 "Issues in the container domain.",
 "Issues in the data domain.",
 "Issues in the identity and access domain.",
-"Issues in the vulnerability domain."
+"Issues in the vulnerability domain.",
+"Issues in the threat domain."
 ],
 "type": "string"
 }
@@ -6281,19 +6351,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -6301,7 +6380,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -6309,6 +6393,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -6331,9 +6417,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -6348,15 +6437,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -6364,6 +6461,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -6371,33 +6470,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -6405,7 +6516,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -6413,6 +6529,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -6435,9 +6553,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -6452,15 +6573,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -6468,6 +6597,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -6475,15 +6606,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -6534,19 +6668,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -6554,7 +6697,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -6562,6 +6710,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -6584,9 +6734,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -6601,15 +6754,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -6617,6 +6778,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -6624,33 +6787,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -6658,7 +6833,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -6666,6 +6846,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -6688,9 +6870,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -6705,15 +6890,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -6721,6 +6914,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -6728,15 +6923,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -8371,19 +8569,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -8391,7 +8598,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -8399,6 +8611,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -8421,9 +8635,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -8438,15 +8655,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -8454,6 +8679,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -8461,33 +8688,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -8495,7 +8734,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -8503,6 +8747,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -8525,9 +8771,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -8542,15 +8791,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -8558,6 +8815,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -8565,15 +8824,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -8624,19 +8886,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -8644,7 +8915,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -8652,6 +8928,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -8674,9 +8952,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -8691,15 +8972,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -8707,6 +8996,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -8714,33 +9005,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -8748,7 +9051,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -8756,6 +9064,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -8778,9 +9088,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -8795,15 +9108,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -8811,6 +9132,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -8818,15 +9141,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },