indicator

nounid 2841·updated May 9, 2026

candidate

Recognized action, specific, generalized, or theoretical, that an adversary might be expected to take in preparation for an attack.

polysemous

Classifications

per-axis with provenance

Event85%llm-generatedllm:claude-haiku-4-5

unclassified

unclassified

3 surface forms

6 senses across 5 frameworks

National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon1 senseview framework →

§1: An occurrence or sign that an incident may have occurred or may be in progress.

CPMI-IOSCO Guidance on Cyber Resilience for Financial Market Infrastructures1 senseview framework →

§1: An occurrence or sign which reveals that an incident may have occurred or be in progress.

NISTIR 7298: Glossary of Key Information Security Terms, Revision 22 sensesview framework →

§1: Recognized action, specific, generalized, or theoretical, that an adversary might be expected to take in preparation for an attack.
§2 · sense_2_pending_review: A sign that an incident may have occurred or may be currently occurring.

CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →

§1: Recognized action, specific, generalized, or theoretical, that an adversary might be expected to take in preparation for an attack.

NIST SP 800-611 senseview framework →

§1: A sign that an incident may have occurred or may be currently occurring.

term as subject — 1 triple

term as object — 1 triple