Table of Contents

Intellectual Property Rights
Foreword
Introduction
1 Scope
2 References
3 Definitions and abbreviations
4 From basic events and traces
  to security incidents
5 Positioning the various elements
  against the MITRE CybOX and STIX
  reference frameworks
6 List of symptoms/artifacts and
  methods of detection
7 Examples to illustrate the previous
  concepts
Annex A (informative) - Authors & contributors
Annex B (informative) - Bibliography
History

Abstract

Specifies and describe a classification of the main symptoms/use cases, which are used to detect security events listed in GS ISI 002.

General Product Information

Published
Document Type	Standard
Status	Current
Publisher	European Telecommunications Standards Institute
Pages
ISBN
Committee	ISI