google-api-python-client 2.170.0__py3-none-any.whl → 2.172.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/securitycenter.v1beta2.json

@@ -2003,7 +2003,7 @@
 }
 }
 },
-"revision": "20250509",
+"revision": "20250519",
 "rootUrl": "https://securitycenter.googleapis.com/",
 "schemas": {
 "Access": {
@@ -3383,6 +3383,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -3403,6 +3410,33 @@
 },
 "type": "object"
 },
+"FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "Finding",
@@ -6063,6 +6097,13 @@
 "format": "int64",
 "type": "string"
 },
+"operations": {
+"description": "Operation(s) performed on a file.",
+"items": {
+"$ref": "GoogleCloudSecuritycenterV2FileOperation"
+},
+"type": "array"
+},
 "partiallyHashed": {
 "description": "True when the hash covers only a prefix of the file.",
 "type": "boolean"
@@ -6083,6 +6124,33 @@
 },
 "type": "object"
 },
+"GoogleCloudSecuritycenterV2FileOperation": {
+"description": "Operation(s) performed on a file.",
+"id": "GoogleCloudSecuritycenterV2FileOperation",
+"properties": {
+"type": {
+"description": "The type of the operation",
+"enum": [
+"OPERATION_TYPE_UNSPECIFIED",
+"OPEN",
+"READ",
+"RENAME",
+"WRITE",
+"EXECUTE"
+],
+"enumDescriptions": [
+"The operation is unspecified.",
+"Represents an open operation.",
+"Represents a read operation.",
+"Represents a rename operation.",
+"Represents a write operation.",
+"Represents an execute operation."
+],
+"type": "string"
+}
+},
+"type": "object"
+},
 "GoogleCloudSecuritycenterV2Finding": {
 "description": "Security Command Center finding. A finding is a record of assessment data like security, risk, health, or privacy, that is ingested into Security Command Center for presentation, notification, analysis, policy testing, and enforcement. For example, a cross-site scripting (XSS) vulnerability in an App Engine application is a finding.",
 "id": "GoogleCloudSecuritycenterV2Finding",
@@ -6778,7 +6846,8 @@
 "CONTAINER",
 "DATA",
 "IDENTITY_AND_ACCESS",
-"VULNERABILITY"
+"VULNERABILITY",
+"THREAT"
 ],
 "enumDescriptions": [
 "Unspecified domain category.",
@@ -6787,7 +6856,8 @@
 "Issues in the container domain.",
 "Issues in the data domain.",
 "Issues in the identity and access domain.",
-"Issues in the vulnerability domain."
+"Issues in the vulnerability domain.",
+"Issues in the threat domain."
 ],
 "type": "string"
 }
@@ -7274,19 +7344,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -7294,7 +7373,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -7302,6 +7386,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -7324,9 +7410,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -7341,15 +7430,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -7357,6 +7454,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -7364,33 +7463,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -7398,7 +7509,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -7406,6 +7522,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -7428,9 +7546,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -7445,15 +7566,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -7461,6 +7590,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -7468,15 +7599,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -7527,19 +7661,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -7547,7 +7690,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -7555,6 +7703,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -7577,9 +7727,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -7594,15 +7747,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -7610,6 +7771,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -7617,33 +7780,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -7651,7 +7826,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -7659,6 +7839,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -7681,9 +7863,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -7698,15 +7883,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -7714,6 +7907,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -7721,15 +7916,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -9115,19 +9313,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -9135,7 +9342,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -9143,6 +9355,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -9165,9 +9379,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -9182,15 +9399,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -9198,6 +9423,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -9205,33 +9432,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -9239,7 +9478,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -9247,6 +9491,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -9269,9 +9515,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -9286,15 +9535,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -9302,6 +9559,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -9309,15 +9568,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },
@@ -9368,19 +9630,28 @@
 "TECHNIQUE_UNSPECIFIED",
 "DATA_OBFUSCATION",
 "DATA_OBFUSCATION_STEGANOGRAPHY",
+"OS_CREDENTIAL_DUMPING",
+"OS_CREDENTIAL_DUMPING_PROC_FILESYSTEM",
+"OS_CREDENTIAL_DUMPING_ETC_PASSWORD_AND_ETC_SHADOW",
+"DATA_FROM_LOCAL_SYSTEM",
 "AUTOMATED_EXFILTRATION",
 "OBFUSCATED_FILES_OR_INFO",
 "STEGANOGRAPHY",
 "COMPILE_AFTER_DELIVERY",
 "COMMAND_OBFUSCATION",
+"SCHEDULED_TRANSFER",
+"SYSTEM_OWNER_USER_DISCOVERY",
 "MASQUERADING",
 "MATCH_LEGITIMATE_NAME_OR_LOCATION",
 "BOOT_OR_LOGON_INITIALIZATION_SCRIPTS",
 "STARTUP_ITEMS",
 "NETWORK_SERVICE_DISCOVERY",
 "SCHEDULED_TASK_JOB",
+"SCHEDULED_TASK_JOB_CRON",
 "CONTAINER_ORCHESTRATION_JOB",
 "PROCESS_INJECTION",
+"INPUT_CAPTURE",
+"INPUT_CAPTURE_KEYLOGGING",
 "PROCESS_DISCOVERY",
 "COMMAND_AND_SCRIPTING_INTERPRETER",
 "UNIX_SHELL",
@@ -9388,7 +9659,12 @@
 "EXPLOITATION_FOR_PRIVILEGE_ESCALATION",
 "PERMISSION_GROUPS_DISCOVERY",
 "CLOUD_GROUPS",
+"INDICATOR_REMOVAL",
+"INDICATOR_REMOVAL_CLEAR_LINUX_OR_MAC_SYSTEM_LOGS",
+"INDICATOR_REMOVAL_CLEAR_COMMAND_HISTORY",
 "INDICATOR_REMOVAL_FILE_DELETION",
+"INDICATOR_REMOVAL_TIMESTOMP",
+"INDICATOR_REMOVAL_CLEAR_MAILBOX_DATA",
 "APPLICATION_LAYER_PROTOCOL",
 "DNS",
 "SOFTWARE_DEPLOYMENT_TOOLS",
@@ -9396,6 +9672,8 @@
 "DEFAULT_ACCOUNTS",
 "LOCAL_ACCOUNTS",
 "CLOUD_ACCOUNTS",
+"FILE_AND_DIRECTORY_DISCOVERY",
+"ACCOUNT_DISCOVERY_LOCAL_ACCOUNT",
 "PROXY",
 "EXTERNAL_PROXY",
 "MULTI_HOP_PROXY",
@@ -9418,9 +9696,12 @@
 "LOCAL_ACCOUNT",
 "DEOBFUSCATE_DECODE_FILES_OR_INFO",
 "EXPLOIT_PUBLIC_FACING_APPLICATION",
+"SUPPLY_CHAIN_COMPROMISE",
+"COMPROMISE_SOFTWARE_DEPENDENCIES_AND_DEVELOPMENT_TOOLS",
 "USER_EXECUTION",
 "DOMAIN_POLICY_MODIFICATION",
 "DATA_DESTRUCTION",
+"DATA_ENCRYPTED_FOR_IMPACT",
 "SERVICE_STOP",
 "INHIBIT_SYSTEM_RECOVERY",
 "FIRMWARE_CORRUPTION",
@@ -9435,15 +9716,23 @@
 "EVENT_TRIGGERED_EXECUTION",
 "BOOT_OR_LOGON_AUTOSTART_EXECUTION",
 "KERNEL_MODULES_AND_EXTENSIONS",
+"SHORTCUT_MODIFICATION",
 "ABUSE_ELEVATION_CONTROL_MECHANISM",
+"ABUSE_ELEVATION_CONTROL_MECHANISM_SUDO_AND_SUDO_CACHING",
 "UNSECURED_CREDENTIALS",
+"CREDENTIALS_IN_FILES",
 "BASH_HISTORY",
 "PRIVATE_KEYS",
+"SUBVERT_TRUST_CONTROL",
+"INSTALL_ROOT_CERTIFICATE",
 "COMPROMISE_HOST_SOFTWARE_BINARY",
 "CREDENTIALS_FROM_PASSWORD_STORES",
 "MODIFY_AUTHENTICATION_PROCESS",
+"PLUGGABLE_AUTHENTICATION_MODULES",
 "IMPAIR_DEFENSES",
 "DISABLE_OR_MODIFY_TOOLS",
+"INDICATOR_BLOCKING",
+"DISABLE_OR_MODIFY_LINUX_AUDIT_SYSTEM",
 "HIDE_ARTIFACTS",
 "HIDDEN_FILES_AND_DIRECTORIES",
 "HIDDEN_USERS",
@@ -9451,6 +9740,8 @@
 "EXFILTRATION_TO_CLOUD_STORAGE",
 "DYNAMIC_RESOLUTION",
 "LATERAL_TOOL_TRANSFER",
+"HIJACK_EXECUTION_FLOW",
+"HIJACK_EXECUTION_FLOW_DYNAMIC_LINKER_HIJACKING",
 "MODIFY_CLOUD_COMPUTE_INFRASTRUCTURE",
 "CREATE_SNAPSHOT",
 "CLOUD_INFRASTRUCTURE_DISCOVERY",
@@ -9458,33 +9749,45 @@
 "DEVELOP_CAPABILITIES_MALWARE",
 "OBTAIN_CAPABILITIES",
 "OBTAIN_CAPABILITIES_MALWARE",
+"OBTAIN_CAPABILITIES_VULNERABILITIES",
 "ACTIVE_SCANNING",
 "SCANNING_IP_BLOCKS",
 "STAGE_CAPABILITIES",
+"UPLOAD_MALWARE",
 "CONTAINER_ADMINISTRATION_COMMAND",
 "DEPLOY_CONTAINER",
 "ESCAPE_TO_HOST",
 "CONTAINER_AND_RESOURCE_DISCOVERY",
 "REFLECTIVE_CODE_LOADING",
-"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES"
+"STEAL_OR_FORGE_AUTHENTICATION_CERTIFICATES",
+"FINANCIAL_THEFT"
 ],
 "enumDescriptions": [
 "Unspecified value.",
 "T1001",
 "T1001.002",
+"T1003",
+"T1003.007",
+"T1003.008",
+"T1005",
 "T1020",
 "T1027",
 "T1027.003",
 "T1027.004",
 "T1027.010",
+"T1029",
+"T1033",
 "T1036",
 "T1036.005",
 "T1037",
 "T1037.005",
 "T1046",
 "T1053",
+"T1053.003",
 "T1053.007",
 "T1055",
+"T1056",
+"T1056.001",
 "T1057",
 "T1059",
 "T1059.004",
@@ -9492,7 +9795,12 @@
 "T1068",
 "T1069",
 "T1069.003",
+"T1070",
+"T1070.002",
+"T1070.003",
 "T1070.004",
+"T1070.006",
+"T1070.008",
 "T1071",
 "T1071.004",
 "T1072",
@@ -9500,6 +9808,8 @@
 "T1078.001",
 "T1078.003",
 "T1078.004",
+"T1083",
+"T1087.001",
 "T1090",
 "T1090.002",
 "T1090.003",
@@ -9522,9 +9832,12 @@
 "T1136.001",
 "T1140",
 "T1190",
+"T1195",
+"T1195.001",
 "T1204",
 "T1484",
 "T1485",
+"T1486",
 "T1489",
 "T1490",
 "T1495",
@@ -9539,15 +9852,23 @@
 "T1546",
 "T1547",
 "T1547.006",
+"T1547.009",
 "T1548",
+"T1548.003",
 "T1552",
+"T1552.001",
 "T1552.003",
 "T1552.004",
+"T1553",
+"T1553.004",
 "T1554",
 "T1555",
 "T1556",
+"T1556.003",
 "T1562",
 "T1562.001",
+"T1562.006",
+"T1562.012",
 "T1564",
 "T1564.001",
 "T1564.002",
@@ -9555,6 +9876,8 @@
 "T1567.002",
 "T1568",
 "T1570",
+"T1574",
+"T1574.006",
 "T1578",
 "T1578.001",
 "T1580",
@@ -9562,15 +9885,18 @@
 "T1587.001",
 "T1588",
 "T1588.001",
+"T1588.006",
 "T1595",
 "T1595.001",
 "T1608",
+"T1608.001",
 "T1609",
 "T1610",
 "T1611",
 "T1613",
 "T1620",
-"T1649"
+"T1649",
+"T1657"
 ],
 "type": "string"
 },