{"ok":true,"contract":"shatteredcastles.diamond.model.v1","name":"Diamond Model of Intrusion Analysis","version":"Caltagirone-Pendergast-Betz-2013","suite":"ShatteredCastle(s)","core_features":["adversary","infrastructure","capability","victim"],"meta_features":["timestamp","phase","result","direction","methodology","resources"],"extended_features":["social_political","technology"],"core_edges":[["adversary","capability"],["adversary","infrastructure"],["infrastructure","capability"],["infrastructure","victim"],["capability","victim"]],"extended_axes":[{"between":["adversary","victim"],"feature":"social_political"},{"between":["capability","infrastructure"],"feature":"technology"}],"direction_values":["victim-to-infrastructure","infrastructure-to-victim","infrastructure-to-infrastructure","adversary-to-infrastructure","infrastructure-to-adversary","bidirectional","unknown"],"centered_approaches":{"victim":{"direct":["infrastructure","capability"],"context":["social_political"],"hypothesis":["adversary"]},"capability":{"direct":["adversary","infrastructure","victim"],"context":["technology"],"hypothesis":[]},"infrastructure":{"direct":["adversary","capability","victim"],"context":["technology"],"hypothesis":[]},"adversary":{"direct":["capability","infrastructure"],"context":["social_political"],"hypothesis":["victim"]},"social_political":{"direct":[],"context":["adversary","victim"],"hypothesis":["adversary","victim"]},"technology":{"direct":[],"context":["capability","infrastructure"],"hypothesis":["capability","infrastructure"]}},"semantics":{"unknown_features_are_knowledge_gaps":true,"confidence_scheme_implementation_defined":true,"phase_model_pluggable":true,"automatic_attribution":false,"pivot_success_guaranteed":false,"grouping_problem_specific":true},"model_digest_sha256":"32d50d192c6adb6dcf136604d932cefe725a1bbcb577a03b511279bfcd88c5c5","actions":["model","normalize_event","pivot","contextualize","thread","group","group_family","activity_attack"]}