For the complete documentation index, see llms.txt. This page is also available as Markdown.

Vulnerability

Field
Type
Possible Operators
Description

Guid

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Unique identifier of the issue in Forestall.

Severity

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Severity level of the issue: Critical, High, Medium, Low or Info.

Name

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Name of the issue.

Tags

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Labels attached to issues to categorize, group, and make it easy to understand.

Impact

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

The special tag attached to issues to identify their effect on the scanned environment (Active Directory, Azure, AWS, GCP or GitHub).

EaseOfDetection

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Indicates the level of effort to detect exploitation of the issues. Ease of Detection can be Easy, Medium, or High.

EaseOfMitigation

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Indicates the level of effort to mitigate/remediate the issues. Ease of Mitigation can be Easy, Medium, or High.

EaseOfDeception

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Indicates the level of effort of implementing deceptive countermeasures based on issues. Ease of Deception can be Easy, Medium, or High.

AttackTactic

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Specific tactical category derived from the MITRE ATT&CK® framework. It classifies the behavior, strategy, or stage of cyber threats within security analysis or incident response systems. Tactics help analysts identify attackers' objectives and better understand threat activities.

FsprotectImpactName

TEXT

LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY

Refers to the specific impact classification or identifier assigned to a vulnerability within the Forestall framework, defining the potential effect or severity associated with that vulnerability.

Last updated

Was this helpful?