{
  "version": 1,
  "description": "The Indicator of Trust provides insight about data on what can be trusted and known as a good actor. Similar to a whitelist but on steroids, reusing features one would use with Indicators of Compromise, but to filter out what is known to be good.",
  "expanded": "Indicators of Trust",
  "namespace": "trust",
  "exclusive": true,
  "predicates": [
    {
      "value": "trust",
      "expanded": "How much trust the analyst has with this indicator.",
      "uuid": "fd96625d-2ed1-5d5d-8a6c-e044a6eb74c6"
    },
    {
      "value": "frequency",
      "expanded": "Recency/count of occurence at which the indicator occurs in data.",
      "uuid": "d172643e-cc8d-5b83-b34c-8ba8b3de26d0"
    },
    {
      "value": "valid",
      "expanded": "Whether this indicator was pushed as trusted but cannot be trusted (ie. MD5 cannot be valid because it is cryptographically broken).",
      "uuid": "861ff4fe-8c81-5cea-9c9b-b43142ddcef5"
    }
  ],
  "values": [
    {
      "predicate": "trust",
      "entry": [
        {
          "value": "unknown",
          "expanded": "Unknown Confidence State",
          "uuid": "159977de-f8fb-5682-b017-f35e698006f7"
        },
        {
          "value": "none",
          "expanded": "Cannot Trust, no confidence",
          "uuid": "c957a2aa-151a-586a-98dc-6b285d04b847"
        },
        {
          "value": "partial",
          "expanded": "Low confidence",
          "uuid": "1782877e-d4da-5d6f-bef6-379e67262317"
        },
        {
          "value": "relationship",
          "expanded": "Inherited Full Trust by a third party that we trust",
          "uuid": "6cbd287c-0305-5190-a659-7c9d44780ac6"
        },
        {
          "value": "full",
          "expanded": "We fully trust it",
          "uuid": "a0d78e32-3dfb-59aa-b554-401db86c6885"
        }
      ]
    },
    {
      "predicate": "frequency",
      "entry": [
        {
          "value": "hourly",
          "expanded": "This attribute is likely to happen at an hourly interval",
          "uuid": "884f9dc2-5825-5c92-a7c7-17ba44d08f2a"
        },
        {
          "value": "daily",
          "expanded": "This attribute is likely to happen at a daily interval",
          "uuid": "d74e986a-21eb-59d9-a575-c2a7ca5e7595"
        },
        {
          "value": "weekly",
          "expanded": "This attribute is likely to happen at a weekly interval",
          "uuid": "e3610001-666d-5cd8-8dcf-0ac26ebda7d5"
        },
        {
          "value": "monthly",
          "expanded": "This attribute is likely to happen at a monthly interval",
          "uuid": "9031df10-7d12-598b-9d16-5cbf5919d4a0"
        },
        {
          "value": "yearly",
          "expanded": "Thie attribute is likely to happen at a yearly interval",
          "uuid": "b9b42fa5-ef37-5dcc-be8c-4b6466292b8b"
        }
      ]
    },
    {
      "predicate": "valid",
      "entry": [
        {
          "value": "true",
          "expanded": "This Trust is valid",
          "uuid": "eb451c7c-b826-56fe-98ed-dbcee6548e77"
        },
        {
          "value": "false",
          "expanded": "This trust is invalid. Such as a MD5 Hash etc.",
          "uuid": "e87a6c8d-1d19-5e08-92be-d5e3236a2b55"
        }
      ]
    }
  ],
  "refs": [
    "https://trust.fyi/"
  ],
  "uuid": "a0a7da02-7f88-5a0c-b78e-61505fa37533"
}