(AssetClass)-[:REQUIRES]->(Control) (ClientAsset)-[:CONNECTS_TO]->(ClientAsset) -- property: protocol (ClientAsset)-[:IMPLEMENTS]->(Control) (ClientAsset)-[:INSTANCE_OF]->(AssetClass) (Control)-[:BELONGS_TO]->(Framework) (Control)-[:MITIGATES]->(Technique) (Procedure)-[:DEFEATED_BY]->(Control) (Procedure)-[:ENABLES]->(Technique)
ClientAsset : id, name, class, tags (list) Control : id, name, family, framework ← unique on {id, framework} Technique : id, name Procedure : name, port AssetClass : name Framework : name
Intelligence, Zone, Component, Asset
CVE, ThreatActor, Campaign, OSINTSource