1. Home
  2. Entities
  3. Concepts

Shapes Tree

Tree

action:Action
action:ActionArgumentFacet
action:ActionEstimationFacet
action:ActionFrequencyFacet
action:ActionLifecycle
action:ActionPattern
action:ActionReferencesFacet
action:ArrayOfAction
core:Annotation
core:Assertion
core:AttributedName
core:Bundle
core:Compilation
core:ConfidenceFacet
core:ContextualCompilation
core:ControlledVocabulary
core:EnclosingCompilation
core:ExternalReference
core:Facet
core:Grouping
core:IdentityAbstraction
core:Item
core:MarkingDefinitionAbstraction
core:ModusOperandi
core:Relationship
core:UcoObject
identity:AddressFacet
identity:AffiliationFacet
identity:BirthInformationFacet
identity:CountryOfResidenceFacet
identity:EventsFacet
identity:IdentifierFacet
identity:Identity
identity:IdentityFacet
identity:LanguagesFacet
identity:NationalityFacet
identity:OccupationFacet
identity:Organization
identity:OrganizationDetailsFacet
identity:Person
identity:PersonalDetailsFacet
identity:PhysicalInfoFacet
identity:QualificationFacet
identity:RelatedIdentityFacet
identity:SimpleNameFacet
identity:VisaFacet
investigation:Attorney
investigation:Authorization
investigation:Examiner
investigation:ExaminerActionLifecylce
investigation:Investigation
investigation:InvestigativeAction
investigation:Investigator
investigation:ProvenanceRecord
investigation:Subject
investigation:SubjectActionLifecycle
investigation:VictimActionLifecycle
location:GPSCoordinatesFacet
location:LatLongCoordinatesFacet
location:Location
location:SimpleAddressFacet
marking:GranularMarking
marking:LicenseMarking
marking:MarkingDefinition
marking:MarkingModel
marking:ReleaseToMarking
marking:StatementMarking
marking:TermsOfUseMarking
observable:API
observable:ARPCache
observable:ARPCacheEntry
observable:Account
observable:AccountAuthenticationFacet
observable:AccountFacet
observable:Address
observable:AlternateDataStream
observable:Appliance
observable:Application
observable:ApplicationAccount
observable:ApplicationAccountFacet
observable:ApplicationFacet
observable:ArchiveFile
observable:ArchiveFileFacet
observable:AttachmentFacet
observable:Audio
observable:AudioFacet
observable:AutonomousSystem
observable:AutonomousSystemFacet
observable:BlockDeviceNode
observable:BluetoothAddress
observable:BluetoothAddressFacet
observable:BotConfiguration
observable:BrowserBookmark
observable:BrowserBookmarkFacet
observable:BrowserCookie
observable:BrowserCookieFacet
observable:Calendar
observable:CalendarEntry
observable:CalendarEntryFacet
observable:CalendarFacet
observable:CharacterDeviceNode
observable:Code
observable:CompressedStreamFacet
observable:ComputerSpecification
observable:ComputerSpecificationFacet
observable:Contact
observable:ContactAddress
observable:ContactAffiliation
observable:ContactEmail
observable:ContactFacet
observable:ContactList
observable:ContactListFacet
observable:ContactMessaging
observable:ContactPhone
observable:ContactProfile
observable:ContactSIP
observable:ContactURL
observable:ContentData
observable:ContentDataFacet
observable:CookieHistory
observable:Credential
observable:CredentialDump
observable:DNSCache
observable:DNSRecord
observable:DataRangeFacet
observable:DefinedEffectFacet
observable:Device
observable:DeviceFacet
observable:DigitalAccount
observable:DigitalAccountFacet
observable:DigitalAddress
observable:DigitalAddressFacet
observable:DigitalSignatureInfo
observable:DigitalSignatureInfoFacet
observable:Directory
observable:Disk
observable:DiskFacet
observable:DiskPartition
observable:DiskPartitionFacet
observable:DomainName
observable:DomainNameFacet
observable:EXIFFacet
observable:EmailAccount
observable:EmailAccountFacet
observable:EmailAddress
observable:EmailAddressFacet
observable:EmailMessage
observable:EmailMessageFacet
observable:EncodedStreamFacet
observable:EncryptedStreamFacet
observable:EnvironmentVariable
observable:Event
observable:EventFacet
observable:EventLog
observable:ExtInodeFacet
observable:ExtractedString
observable:ExtractedStringsFacet
observable:File
observable:FileFacet
observable:FilePermissionsFacet
observable:FileSystem
observable:FileSystemFacet
observable:FileSystemObject
observable:ForumPost
observable:ForumPrivateMessage
observable:FragmentFacet
observable:GUI
observable:GenericObservableObject
observable:GeoLocationEntry
observable:GeoLocationEntryFacet
observable:GeoLocationLog
observable:GeoLocationLogFacet
observable:GeoLocationTrack
observable:GeoLocationTrackFacet
observable:GlobalFlagType
observable:HTTPConnection
observable:HTTPConnectionFacet
observable:Hostname
observable:ICMPConnection
observable:ICMPConnectionFacet
observable:IComHandlerActionType
observable:IExecActionType
observable:IPAddress
observable:IPAddressFacet
observable:IPNetmask
observable:IPv4Address
observable:IPv4AddressFacet
observable:IPv6Address
observable:IPv6AddressFacet
observable:IShowMessageActionType
observable:Image
observable:ImageFacet
observable:InstantMessagingAddress
observable:InstantMessagingAddressFacet
observable:Junction
observable:Library
observable:LibraryFacet
observable:MACAddress
observable:MACAddressFacet
observable:Memory
observable:MemoryFacet
observable:Message
observable:MessageFacet
observable:MessageThread
observable:MessageThreadFacet
observable:MftRecordFacet
observable:MimePartType
observable:MobileAccount
observable:MobileAccountFacet
observable:MobileDevice
observable:MobileDeviceFacet
observable:Mutex
observable:MutexFacet
observable:NTFSFile
observable:NTFSFileFacet
observable:NTFSFilePermissionsFacet
observable:NamedPipe
observable:NetworkAppliance
observable:NetworkConnection
observable:NetworkConnectionFacet
observable:NetworkFlow
observable:NetworkFlowFacet
observable:NetworkInterface
observable:NetworkInterfaceFacet
observable:NetworkProtocol
observable:NetworkRoute
observable:NetworkSubnet
observable:Note
observable:NoteFacet
observable:Observable
observable:ObservableAction
observable:ObservableObject
observable:ObservablePattern
observable:ObservableRelationship
observable:Observation
observable:OnlineService
observable:OnlineServiceFacet
observable:OperatingSystem
observable:OperatingSystemFacet
observable:PDFFile
observable:PDFFileFacet
observable:PathRelationFacet
observable:PaymentCard
observable:PhoneAccount
observable:PhoneAccountFacet
observable:PhoneCall
observable:PhoneCallFacet
observable:Pipe
observable:Post
observable:Process
observable:ProcessFacet
observable:Profile
observable:ProfileFacet
observable:PropertiesEnumeratedEffectFacet
observable:PropertyReadEffectFacet
observable:RasterPicture
observable:RasterPictureFacet
observable:ReparsePoint
observable:SIMCard
observable:SIMCardFacet
observable:SIPAddress
observable:SIPAddressFacet
observable:SMSMessage
observable:SMSMessageFacet
observable:SQLiteBlob
observable:SQLiteBlobFacet
observable:SecurityAppliance
observable:Semaphore
observable:SendControlCodeEffectFacet
observable:ShopListing
observable:Snapshot
observable:Socket
observable:SocketAddress
observable:Software
observable:SoftwareFacet
observable:StateChangeEffectFacet
observable:SymbolicLink
observable:SymbolicLinkFacet
observable:TCPConnection
observable:TCPConnectionFacet
observable:TaskActionType
observable:Thread
observable:TriggerType
observable:Tweet
observable:TwitterProfileFacet
observable:UNIXAccount
observable:UNIXAccountFacet
observable:UNIXFile
observable:UNIXFilePermissionsFacet
observable:UNIXProcess
observable:UNIXProcessFacet
observable:UNIXVolumeFacet
observable:URL
observable:URLFacet
observable:URLHistory
observable:URLHistoryEntry
observable:URLHistoryFacet
observable:URLVisit
observable:URLVisitFacet
observable:UserAccount
observable:UserAccountFacet
observable:UserSession
observable:UserSessionFacet
observable:ValuesEnumeratedEffectFacet
observable:Volume
observable:VolumeFacet
observable:WebPage
observable:WhoIs
observable:WhoIsFacet
observable:WhoisContactFacet
observable:WhoisRegistrarInfoType
observable:WifiAddress
observable:WifiAddressFacet
observable:Wiki
observable:WikiArticle
observable:WindowsAccount
observable:WindowsAccountFacet
observable:WindowsActiveDirectoryAccount
observable:WindowsActiveDirectoryAccountFacet
observable:WindowsComputerSpecification
observable:WindowsComputerSpecificationFacet
observable:WindowsCriticalSection
observable:WindowsEvent
observable:WindowsFilemapping
observable:WindowsHandle
observable:WindowsHook
observable:WindowsMailslot
observable:WindowsNetworkShare
observable:WindowsPEBinaryFile
observable:WindowsPEBinaryFileFacet
observable:WindowsPEFileHeader
observable:WindowsPEOptionalHeader
observable:WindowsPESection
observable:WindowsPrefetch
observable:WindowsPrefetchFacet
observable:WindowsProcess
observable:WindowsProcessFacet
observable:WindowsRegistryHive
observable:WindowsRegistryHiveFacet
observable:WindowsRegistryKey
observable:WindowsRegistryKeyFacet
observable:WindowsRegistryValue
observable:WindowsService
observable:WindowsServiceFacet
observable:WindowsSystemRestore
observable:WindowsTask
observable:WindowsTaskFacet
observable:WindowsThread
observable:WindowsThreadFacet
observable:WindowsVolumeFacet
observable:WindowsWaitableTime
observable:WirelessNetworkConnection
observable:WirelessNetworkConnectionFacet
observable:X509Certificate
observable:X509CertificateFacet
observable:X509V3Certificate
observable:X509V3ExtensionsFacet
pattern:LogicalPattern
pattern:Pattern
pattern:PatternExpression
role:BenevolentRole
role:MaliciousRole
role:NeutralRole
role:Role
tool:AnalyticTool
tool:BuildConfigurationType
tool:BuildFacet
tool:BuildInformationType
tool:BuildUtilityType
tool:CompilerType
tool:ConfigurationSettingType
tool:DefensiveTool
tool:DependencyType
tool:LibraryType
tool:MaliciousTool
tool:Tool
tool:ToolConfigurationTypeFacet
types:ControlledDictionary
types:ControlledDictionaryEntry
types:Dictionary
types:DictionaryEntry
types:Hash
victim:Victim
victim:VictimTargeting