IDMEF and IODEF

Impact

The Impact class is used to provide the analyzer's assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows:

digraph Impact {
	graph [bb="0,0,201,92",
		rankdir=LR
	];
	node [label="\N"];
	Impact	 [height=1.2778,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IDMEF/Impact.html" TITLE="The Impact class is used to provide the analyzer&#39;s assessment of the impact of the event on the target(s). It is represented in the IDMEF DTD as follows: ">Impact</td> </tr>" %<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] severity (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IDMEF/Impact.html" TITLE="Section 10.)">[ENUM] completion (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IDMEF/Impact.html" TITLE="value is &quot;other&quot;.  (See also Section 10.)">[ENUM] type (Optional) </td></tr>%</table>>,
		pos="100.5,46",
		shape=plaintext,
		width=2.7917];
}

Attributes

severity (Optional)

Section 10.)

Rank	Keyword	Description
0	info	Alert represents informational activity
1	low	Low severity
2	medium	Medium severity
3	high	High severity

completion (Optional)

Section 10.)

Rank	Keyword	Description
0	failed	The attempt was not successful
1	succeeded	The attempt succeeded

type (Optional)

value is "other". (See also Section 10.)

Rank	Keyword	Description
0	admin	Administrative privileges were attempted or obtained
1	dos	A denial of service was attempted or completed
2	file	An action on a file was attempted or completed
3	recon	A reconnaissance probe was attempted or completed
4	user	User privileges were attempted or obtained
5	other	Anything not in one of the above categories