Updates to the Target Industry Field

To align with the STIX 2.1 standard, Anomali has implemented the Industry Sector Vocabulary support for the Target Industry intelligence field. Due to this change, all existing Target Industry field values previously assigned to the observables and threat models are deprecated and no longer available in the ThreatStream UI. If you used the Target Industry field before this change, you must take the following actions:

  • Assign new target industries to the observables and threat models that previously had target industries assigned to them: Target industries can be assigned to observables and threat models owned by your organization in the ThreatStream UI. Refer to Observables and Editing Actors for details.

  • Modify saved search queries accordingly: If you have saved searches or rules with target industries, modify them to use the new Target Industry field values.

    For example:

    target_industry = EmergencyServices must be changed to target_industry = emergency-services

    target_industry = Chemical must be changed to target_industry = chemical

See Saving Observable Search Filters, Saving Threat Model Search Filters, and Editing Rules for details on the editing procedures.

Refer to the table below, to see the difference between old and new values of the Target Industry field,

New Target Industry Values Old Target Industry Values
aerospace Aerospace
agriculture Agriculture
automotive Automotive
chemical Chemical
commercial Commercial
communications Communications
construction Construction
defense Defense
education Education
energy Energy
entertainment Entertainment
financial-services FinancialServices
government (emergency-services, government-local, government-national, government-public services, government-regional) Government (EmergencyServices, GovernmentLocal, GovernmentNational, GovernmentPublicServices, GovernmentRegional)
healthcare Healthcare
hospitality-leisure HospitalityLeisure
infrastructure (dams, nuclear, water) Infrastructure (Dams, Nuclear, Water)
insurance Insurance
manufacturing Manufacturing
mining Mining
non-profit Nonprofit
pharmaceuticals Pharmaceuticals
retail Retail
technology Technology
telecommunications Telecommunications
transportation Transportation
utilities Utilities

If you have questions or need assistance in adopting this change, contact Anomali Support.