Threat

The DFD element this threat is anchored to.

Optional customer comment on the threat.

The date and time the threat was created, in UTC format.

Who created this threat.

The source code files supporting the threat.

The specific assets affected by the threat.

The security goals affected by the threat.

The conditions required for the threat to be exploitable.

The recommended mitigation guidance for this threat.

The severity level of the threat.

The natural-language threat statement.

The current status of the threat.

The STRIDE categories applicable to this threat.

What the threat source can do.

The unique identifier of the threat.

The direct consequence of the threat action.

The unique identifier of the threat model job that produced the threat.

The actor or origin of the threat.

A short title summarizing the threat.

The date and time the threat was last updated, in UTC format.

Who last updated this threat.