Incident Categorization

A. Unauthorized Access to Information (Information Content Security):

• 1. Data Theft: Illicit acquisition of sensitive data.
• 2. Unauthorized Sharing of Sensitive Data: Inappropriate dissemination of confidential information.
• 3. Unauthorized Access to Databases: Unlawful entry into secured database systems.

B. Compromise (Intrusions):

• 1. Malware Attack: Infiltration of malicious software into the system.
• 2. Exploitation of Vulnerabilities: Unlawful utilization of system weaknesses.
• 3. Backdoor Establishment: Creation of unauthorized access points.

C. Intrusion Attempts:

• 1. Failed Authentication Attempts: Unsuccessful efforts to gain access through login procedures.
• 2. Network Scanning: Systematic exploration of network structures.
• 3. Failed Login Attempts: Unsuccessful login endeavors.

D. Denial of Service (Availability):

• 1. DDoS Attacks: Deliberate overwhelming of a service to disrupt normal functioning.
• 2. Server Overload Attacks: Intentional overloading of servers to impair performance.
• 3. Network-level DoS Attacks: Disruption of network services to prevent access.

E. Fraud:

• 1. Phishing Attacks: Deceptive attempts to acquire sensitive information.
• 2. Identity Fraud: Impersonation or theft of personal information for fraudulent purposes.
• 3. Unauthorized Transactions: Illicit financial transactions or manipulations.

F. Information Gathering:

• 1. Network Scanning: Systematic exploration of network infrastructure.
• 2. Open Source Intelligence (OSINT): Collection of information from publicly available sources.
• 3. Systematic Information Collection: Organized gathering of data about the target.

G. Abusive Content:

• 1. Illegal Content Distribution: Unauthorized sharing or dissemination of prohibited content.
• 2. Online Harassment and Threats: Persistent and harmful online behavior.
• 3. Unacceptable Use of Communication Platforms: Inappropriate or abusive use of communication channels.