> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/introduction/glossary.md).

# Glossary

Terminology of Forestall ISPM

### Selected Scan / Current Scan

Forestall enumerates target environments through periodic or on-demand scans.\
The Forestall web interface displays data only from the currently selected scan.\
Users can switch between scans using the combo box in the left navigation bar.\
Before analyzing results, ensure that the correct scan is selected.

### **Risk / Risk Score** <a href="#risk-risk-score" id="risk-risk-score"></a>

Forestall calculates risk scores for scans and objects based on multiple metrics and categories.\
These scores represent the relative security risk of objects or scans within the analyzed environment.

### Object / Entity

The term Object or Entity refers to identity, security, or configuration objects\
within a supported environment analyzed by Forestall.\
Forestall enumerates and analyzes different object types depending on the\
environment being scanned.

### Relation

The term Relation refers to the connections between objects within an environment\
as identified and analyzed by Forestall.

Relations represent how one object can affect, control, or gain influence over\
another object. Forestall enumerates and analyzes various types of relations\
depending on the environment being scanned.

### Risky

Risky objects are objects with a risk score greater than 50.

Forestall uses the Risky classification to highlight objects that represent a higher security risk within the analyzed environment based on calculated risk metrics.

### Issue

An Issue represents a vulnerability, misconfiguration, dangerous privilege, or relationship that can pose a security risk within an environment analyzed by Forestall.

Issues highlight conditions that may lead to privilege escalation, lateral movement, or compromise of critical objects.

### Tag

Tags are labels attached to issues to categorize, group, and simplify the understanding of identified security risks.

Tags help organize issues based on their characteristics, affected components, or security themes.

### Impact / Forestall Impact Name

Impact (Forestall Impact Name) is a special classification attached to issues to describe their potential effect on the security posture of the environment.

It indicates what type of damage or control an issue may enable if exploited.

### Severity

Severity represents the risk level of an issue based on its potential impact and likelihood.

Forestall classifies severity as:

* Info
* Low
* Medium
* High
* Critical

### Ease of Mitigation

Ease of Mitigation indicates the level of effort required to remediate or mitigate an issue.

### Ease of Detection

Ease of Detection indicates the level of effort required to detect the exploitation or abuse of an issue.

### Ease of Deception

Ease of Deception indicates the level of effort required to implement deceptive countermeasures related to an issue.

### Exploitation Privilege

Exploitation Privilege refers to the level of permission or access an attacker must have in order to exploit a specific issue.

This may include standard user access, elevated privileges, or administrative permissions.

### Exploitation Certainty

Exploitation Certainty indicates the likelihood that an issue can be successfully exploited based on technical feasibility and environmental conditions.

### Path / Attack Path

An Attack Path represents a sequence of relationships that allow one object to compromise or control another object.

Forestall identifies attack paths by analyzing how relationships between objects can be chained together to achieve higher privileges or broader impact.

### Dangerous Path

A Dangerous Path is a type of attack path in which lower-privileged objects can ultimately compromise higher-privileged or critical objects through a combination of relationships.

{% content-ref url="/pages/mr37740U3mVfddaFCUvN" %}
[Active Directory Glossary](/forestall/introduction/glossary/glossary.md)
{% endcontent-ref %}

{% content-ref url="/pages/MqgLzCnQK7cJUilfhzfr" %}
[Azure / Entra ID Glossary](/forestall/introduction/glossary/azure-entra-id-glossary.md)
{% endcontent-ref %}

{% content-ref url="/pages/BnWDWsuL1CYhgh2kRXC3" %}
[AWS / IAM Glossary](/forestall/introduction/glossary/aws-iam-glossary.md)
{% endcontent-ref %}

{% content-ref url="/pages/XLFB09goUiCip8DfBLY8" %}
[GCP Glossary](/forestall/introduction/glossary/gcp-glossary.md)
{% endcontent-ref %}

{% content-ref url="/pages/wvstnpG6gdwfraiVnp0n" %}
[GitHub Glossary](/forestall/introduction/glossary/github-glossary.md)
{% endcontent-ref %}