| Code Value |
Definition |
| Attrition | An attack that employs brute force methods to compromise, degrade, or destroy systems, networks, or services |
| Email/Phishing | An attack executed via an email message or attachment |
| External/Removable Media | An attack executed from removable media or a peripheral device |
| Impersonation/Spoofing | An attack involving replacement of legitimate content/services with a malicious substitute |
| Improper Usage | An incident resulting from violation of an organization’s acceptable usage policies by an authorized user |
| Loss or Theft of Equipment | The loss or theft of a computing device or media used by the organization |
| Other | An attack approach that has not been previously specified |
| Unknown | The attack approach is not known |
| Web | An attack executed from a website or web-based application |