Impact

The Impact class is used to provide the analyzer's assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows:

digraph Impact { graph [rankdir=LR]; node [label="\N"]; graph [bb="0,0,234,88"]; Impact [label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="The Impact class is used to provide the analyzer&#39;s assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows: ">Impact</td> </tr>" %<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] severity (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] completion (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="value is &quot;other&quot;. (See also Section 10.)">[ENUM] type (Optional) </td></tr>%</table>>, shape=plaintext, pos="117,44", width="3.25", height="1.2361"]; }



Attributes

severity (Optional)

Section 10.)
Rank Keyword Description
0 info Alert represents informational activity
1 low Low severity
2 medium Medium severity
3 high High severity

completion (Optional)

Section 10.)
Rank Keyword Description
0 failed The attempt was not successful
1 succeeded The attempt succeeded

type (Optional)

value is "other". (See also Section 10.)
Rank Keyword Description
0 admin Administrative privileges were attempted or obtained
1 dos A denial of service was attempted or completed
2 file An action on a file was attempted or completed
3 recon A reconnaissance probe was attempted or completed
4 user User privileges were attempted or obtained
5 other Anything not in one of the above categories


IDMEF


IODEF