-
Notifications
You must be signed in to change notification settings - Fork 2
Specs M4 Risks EBIOS RM Attack Path Step
Claude edited this page Aug 28, 2026
·
1 revision
risks.models.ebios.attack_path_step.AttackPathStep
Individual step of the attack path of a strategic scenario. Reference prefix: EAPS.
| Field | Type | Constraints | Description |
|---|---|---|---|
id |
UUID | PK, auto | Unique identifier |
scenario_id |
relation | FK -> StrategicScenario, required | Parent scenario |
reference |
string | required, unique, prefix EAPS | Code (e.g. EAPS-1) |
order |
integer | required | Position in the path (1 = first step) |
stakeholder_id |
relation | FK -> EcosystemStakeholder, optional | Stakeholder involved |
description |
text | required | Description |
action_type |
enum | required |
initial_access, reconnaissance, lateral_movement, privilege_escalation, data_exfiltration, disruption, manipulation, persistence, other
|
difficulty |
enum | optional |
trivial, easy, moderate, difficult, very_difficult
|
created_at, updated_at
|
- | auto | Standard |
Built from docs/ at v0.36.0. Edits made here are overwritten by the next release : open a pull request against the source instead.
- Administration
- Ask Cairn
- Assets and suppliers
- Compliance
- The dashboard
- Finding your way
- Getting started
- Incidents
- How records move
- Organisational context
- Reports and management review
- Risks
- Trust Center
- Architecture
- Configuration
- Contributing
- The documentation system
- Installation
- Internationalisation
- Operations
- Release process
- Security
- Testing
- Adding an assistant provider
- Adding a dashboard widget
- Adding a domain entity
- Declaring a lifecycle
- Adding an MCP tool
- Adding a REST endpoint
- Adding a report
- Interface conventions
- Dashboard widgets
- Lifecycles
- MCP tools
- MCP tool parameters : Assets
- MCP tool parameters : Compliance
- MCP tool parameters : Governance and context
- MCP tool parameters : General
- MCP tool parameters : Incidents
- MCP tool parameters : Reports and management review
- MCP tool parameters : Risks
- MCP tool parameters : System and administration
- MCP tool parameters : Trust Center
- Management commands
- Models
- Permissions
- REST endpoints
- Environment variables
- MCP server
- REST API
- Assistant module (Ask Cairn)
- Module 0: User Management and Access Control
- Module 1: Context and Organization
- Module 2: Asset Management
- Module 3: Compliance
- Module 4: Risk Management
- Module 4 bis - EBIOS Risk Manager
- Module 5 : Trust Center
- Module 6 : Security Incident Management
- Management review : ISO 27001:2022 compliance (clause 9.3)