/**
 * Cyber-Assistant — Pack de référentiel : NIST SP 800-30 — Événements redoutés (1.0.0)
 * ============================================================================
 * FICHIER GÉNÉRÉ depuis BROUILLON-PACKS-NIST-OWASP-2026-08-04.md (contenu
 * validé par le PO le 2026-08-04). Données de catalogue GÉNÉRIQUES et
 * STANDARDISÉES — aucune donnée client. Lecture seule : jamais copié dans
 * appData (les objets utilisateur portent une référence + un dénormalisé,
 * cf. modules/threat-catalog.js et l'étude
 * ETUDE-REFERENTIELS-ANALYSE-RISQUES-2026-08-04.md §4).
 * Modèle : 1 menace (threats[]) → N scénarios (scenarios[]) instanciables en
 * risques d'analyse. Trilingue FR/EN/NL (décision PO du 04/08).
 * Emplacement OBLIGATOIRE : data/frameworks/ (allowlist update.php).
 */
(function () {
  'use strict';
  window._csiThreatCatalogs = window._csiThreatCatalogs || {};
  window._csiThreatCatalogs["nist-800-30-events"] =
  {
    "meta": {
      "id": "nist-800-30-events",
      "name": "NIST SP 800-30 — Événements redoutés",
      "nameEn": "NIST SP 800-30 — Threat Events",
      "nameNl": "NIST SP 800-30 — Dreigingsgebeurtenissen",
      "version": "1.0.0",
      "publishedAt": "2012-09",
      "sourceDocument": "NIST Special Publication 800-30 Revision 1, Guide for Conducting Risk Assessments — Appendices D & E",
      "organization": "National Institute of Standards and Technology (NIST)",
      "kind": "threat-taxonomy",
      "natureKind": "Catalogue d'événements de menace",
      "natureKindEn": "Threat event catalog",
      "natureKindNl": "Catalogus van dreigingsgebeurtenissen",
      "licence": "Domaine public — œuvre du gouvernement fédéral des États-Unis (17 U.S.C. § 105) ; NIST SP 800-30 Rev. 1, septembre 2012",
      "disclaimer": "Sélection d'événements de menace issus des annexes D et E du NIST SP 800-30 Rev. 1 (domaine public), traduits et adaptés par Cyber-Assistant. Ce catalogue n'est ni affilié au NIST ni endossé par lui. Les organisations doivent évaluer l'applicabilité à leur contexte spécifique.",
      "disclaimerEn": "Selection of threat events from Appendices D and E of NIST SP 800-30 Rev. 1 (public domain), translated and adapted by Cyber-Assistant. This catalog is neither affiliated with nor endorsed by NIST. Organizations should assess applicability to their specific context."
    },
    "threats": [
      {
        "id": "NIST_01",
        "ref": "E-2 · Perform reconnaissance — \"Perform perimeter network reconnaissance/scanning\"",
        "label": "Reconnaissance externe",
        "labelEn": "External Reconnaissance",
        "labelNl": "Externe verkenning",
        "adversarial": true,
        "domainHints": [
          "NETCRYPTO",
          "LOG"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 2
        }
      },
      {
        "id": "NIST_02",
        "ref": "E-2 · Craft or create attack tools — \"Craft spear phishing attacks\"",
        "label": "Hameçonnage ciblé",
        "labelEn": "Spear Phishing",
        "labelNl": "Gerichte phishing",
        "adversarial": true,
        "domainHints": [
          "IAM",
          "LOG"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 3
        }
      },
      {
        "id": "NIST_03",
        "ref": "E-2 · Deliver/insert/install malicious capabilities — \"Deliver known malware to internal organizational information systems (e.g., virus via email)\"",
        "label": "Malware par courriel",
        "labelEn": "Email-borne Malware",
        "labelNl": "Malware via e-mail",
        "adversarial": true,
        "domainHints": [
          "VULN",
          "INFRA",
          "LOG"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 3
        }
      },
      {
        "id": "NIST_04",
        "ref": "E-2 · Deliver/insert/install malicious capabilities — \"Deliver malware by providing removable media\"",
        "label": "Support amovible piégé",
        "labelEn": "Malicious Removable Media",
        "labelNl": "Besmette verwisselbare media",
        "adversarial": true,
        "domainHints": [
          "INFRA",
          "LOG"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 3
        }
      },
      {
        "id": "NIST_05",
        "ref": "E-2 · Deliver/insert/install malicious capabilities — \"Insert untargeted malware into downloadable software and/or into commercial information technology products\"",
        "label": "Chaîne logicielle compromise",
        "labelEn": "Supply Chain Compromise",
        "labelNl": "Gecompromitteerde softwareketen",
        "adversarial": true,
        "domainHints": [
          "SDLC",
          "VULN",
          "LOG"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 4
        }
      },
      {
        "id": "NIST_06",
        "ref": "E-2 · Exploit and compromise — \"Exploit poorly configured or unauthorized information systems exposed to the Internet\"",
        "label": "Exploitation système exposé",
        "labelEn": "Exposed System Exploitation",
        "labelNl": "Uitbuiting blootgesteld systeem",
        "adversarial": true,
        "domainHints": [
          "INFRA",
          "NETCRYPTO",
          "VULN"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 4
        }
      },
      {
        "id": "NIST_07",
        "ref": "E-2 · Exploit and compromise — \"Exploit vulnerabilities using zero-day attacks\"",
        "label": "Attaque zero-day",
        "labelEn": "Zero-day Attack",
        "labelNl": "Zerodayaanval",
        "adversarial": true,
        "domainHints": [
          "INFRA",
          "NETCRYPTO",
          "LOG"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 4
        }
      },
      {
        "id": "NIST_08",
        "ref": "E-2 · Exploit and compromise — \"Compromise information systems or devices used externally and reintroduced into the enterprise\"",
        "label": "Équipement nomade compromis",
        "labelEn": "Compromised Mobile Device",
        "labelNl": "Gecompromitteerd mobiel toestel",
        "adversarial": true,
        "domainHints": [
          "INFRA",
          "IAM",
          "LOG"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 3
        }
      },
      {
        "id": "NIST_09",
        "ref": "E-2 · Conduct an attack — \"Conduct Distributed Denial of Service (DDoS) attacks\"",
        "label": "Déni de service distribué",
        "labelEn": "Distributed Denial of Service",
        "labelNl": "Gedistribueerde denial-of-service",
        "adversarial": true,
        "domainHints": [
          "NETCRYPTO",
          "BCP"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 3
        }
      },
      {
        "id": "NIST_10",
        "ref": "E-2 · Conduct an attack — \"Conduct brute force login attempts/password guessing attacks\"",
        "label": "Force brute",
        "labelEn": "Brute-force Attack",
        "labelNl": "Bruteforceaanval",
        "adversarial": true,
        "domainHints": [
          "IAM",
          "NETCRYPTO",
          "LOG"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 3
        }
      },
      {
        "id": "NIST_11",
        "ref": "E-2 · Conduct an attack — \"Conduct externally-based network traffic modification (man in the middle) attacks\"",
        "label": "Interception réseau (MITM)",
        "labelEn": "Network Interception (MITM)",
        "labelNl": "Netwerkinterceptie (MITM)",
        "adversarial": true,
        "domainHints": [
          "NETCRYPTO",
          "LOG"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 3
        }
      },
      {
        "id": "NIST_12",
        "ref": "E-2 · Conduct an attack — \"Conduct externally-based session hijacking\"",
        "label": "Détournement de session",
        "labelEn": "Session Hijacking",
        "labelNl": "Sessiekaping",
        "adversarial": true,
        "domainHints": [
          "SDLC",
          "NETCRYPTO",
          "LOG"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 3
        }
      },
      {
        "id": "NIST_13",
        "ref": "E-2 · Conduct an attack — \"Conduct outsider-based social engineering to obtain information\"",
        "label": "Ingénierie sociale",
        "labelEn": "Social Engineering",
        "labelNl": "Social engineering",
        "adversarial": true,
        "domainHints": [
          "IAM",
          "DATA",
          "LOG"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 3
        }
      },
      {
        "id": "NIST_14",
        "ref": "E-2 · Conduct an attack — \"Conduct attacks using unauthorized ports, protocols and services\"",
        "label": "Canaux non autorisés",
        "labelEn": "Unauthorized Channels",
        "labelNl": "Ongeautoriseerde kanalen",
        "adversarial": true,
        "domainHints": [
          "NETCRYPTO",
          "INFRA",
          "LOG"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 3
        }
      },
      {
        "id": "NIST_15",
        "ref": "E-2 · Conduct an attack — \"Conduct physical attacks on organizational facilities\"",
        "label": "Attaque physique",
        "labelEn": "Physical Attack",
        "labelNl": "Fysieke aanval",
        "adversarial": true,
        "domainHints": [
          "BCP",
          "INFRA",
          "DATA"
        ],
        "defaults": {
          "likelihood": 1,
          "impact": 4
        }
      },
      {
        "id": "NIST_16",
        "ref": "E-2 · Achieve results — \"Obtain sensitive information via exfiltration\"",
        "label": "Exfiltration de données",
        "labelEn": "Data Exfiltration",
        "labelNl": "Gegevensexfiltratie",
        "adversarial": true,
        "domainHints": [
          "DATA",
          "LOG",
          "NETCRYPTO"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 4
        }
      },
      {
        "id": "NIST_17",
        "ref": "E-2 · Achieve results — \"Cause integrity loss by injecting false but believable data into organizational information systems\" / \"...by polluting or corrupting critical data\"",
        "label": "Altération malveillante",
        "labelEn": "Malicious Data Tampering",
        "labelNl": "Kwaadwillige gegevensmanipulatie",
        "adversarial": true,
        "domainHints": [
          "IAM",
          "LOG",
          "BCP"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 4
        }
      },
      {
        "id": "NIST_18",
        "ref": "E-2 · Maintain a presence or set of capabilities — \"Obfuscate adversary actions\" / \"Adapt cyber attacks based on detailed surveillance\"",
        "label": "Présence persistante",
        "labelEn": "Persistent Presence",
        "labelNl": "Persistente aanwezigheid",
        "adversarial": true,
        "domainHints": [
          "LOG",
          "IAM",
          "VULN"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 4
        }
      },
      {
        "id": "NIST_19",
        "ref": "E-3 · Environmental — \"Fire at primary facility\"",
        "label": "Incendie de site",
        "labelEn": "Site Fire",
        "labelNl": "Brand op de site",
        "adversarial": false,
        "domainHints": [
          "BCP",
          "INFRA"
        ],
        "defaults": {
          "likelihood": 1,
          "impact": 5
        }
      },
      {
        "id": "NIST_20",
        "ref": "E-3 · Environmental — \"Flood at primary facility\"",
        "label": "Inondation / dégât des eaux",
        "labelEn": "Flood / Water Damage",
        "labelNl": "Overstroming / waterschade",
        "adversarial": false,
        "domainHints": [
          "BCP",
          "INFRA"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 4
        }
      },
      {
        "id": "NIST_21",
        "ref": "E-3 · Structural — \"Pervasive disk error\" (couvre aussi \"Disk error\")",
        "label": "Panne matérielle majeure",
        "labelEn": "Major Hardware Failure",
        "labelNl": "Ernstige hardwarestoring",
        "adversarial": false,
        "domainHints": [
          "INFRA",
          "BCP"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 3
        }
      },
      {
        "id": "NIST_22",
        "ref": "E-3 · Accidental — \"Mishandling of critical and/or sensitive information by authorized users\" (couvre aussi \"Spill sensitive information\")",
        "label": "Erreur d'utilisateur",
        "labelEn": "User Error",
        "labelNl": "Gebruikersfout",
        "adversarial": false,
        "domainHints": [
          "IAM",
          "DATA",
          "BCP"
        ],
        "defaults": {
          "likelihood": 4,
          "impact": 2
        }
      },
      {
        "id": "NIST_23",
        "ref": "E-3 · Accidental — \"Incorrect privilege settings\"",
        "label": "Erreur d'administration",
        "labelEn": "Administration Error",
        "labelNl": "Beheerfout",
        "adversarial": false,
        "domainHints": [
          "IAM",
          "INFRA",
          "LOG"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 3
        }
      },
      {
        "id": "NIST_24",
        "ref": "E-3 · Structural — \"Resource depletion\" (couvre aussi \"Communications contention\")",
        "label": "Épuisement de ressources",
        "labelEn": "Resource Exhaustion",
        "labelNl": "Uitputting van middelen",
        "adversarial": false,
        "domainHints": [
          "INFRA",
          "LOG",
          "BCP"
        ],
        "defaults": {
          "likelihood": 3,
          "impact": 2
        }
      },
      {
        "id": "NIST_25",
        "ref": "E-3 (adapté) — perte d'un service essentiel externalisé ; pas d'événement E-3 nommément équivalent",
        "label": "Défaillance fournisseur essentiel",
        "labelEn": "Critical Supplier Failure",
        "labelNl": "Uitval essentiële leverancier",
        "adversarial": false,
        "domainHints": [
          "BCP",
          "INFRA"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 4
        }
      },
      {
        "id": "NIST_26",
        "ref": "E-3 · Environmental — \"Windstorm/tornado at primary facility\" (étendu : coupure d'énergie prolongée)",
        "label": "Tempête / coupure d'énergie",
        "labelEn": "Storm / Power Outage",
        "labelNl": "Storm / stroomuitval",
        "adversarial": false,
        "domainHints": [
          "INFRA",
          "BCP"
        ],
        "defaults": {
          "likelihood": 2,
          "impact": 3
        }
      }
    ],
    "scenarios": [
      {
        "id": "NIST_01_SC",
        "threatId": "NIST_01",
        "label": "Scans du périmètre et collecte d'informations publiques préparant une attaque ciblée",
        "labelEn": "Perimeter scanning and open-source information gathering in preparation for a targeted attack",
        "labelNl": "Scannen van de perimeter en verzamelen van publieke informatie ter voorbereiding van een gerichte aanval"
      },
      {
        "id": "NIST_02_SC",
        "threatId": "NIST_02",
        "label": "Courriel piégé usurpant un tiers de confiance pour voler identifiants ou déclencher un paiement",
        "labelEn": "Booby-trapped email impersonating a trusted party to steal credentials or trigger a payment",
        "labelNl": "Misleidende e-mail namens een vertrouwde partij steelt inloggegevens of lokt een betaling uit"
      },
      {
        "id": "NIST_03_SC",
        "threatId": "NIST_03",
        "label": "Pièce jointe ou lien piégé installant un logiciel malveillant sur un poste interne",
        "labelEn": "Malicious attachment or link installing malware on an internal workstation",
        "labelNl": "Kwaadaardige bijlage of link installeert malware op een intern werkstation"
      },
      {
        "id": "NIST_04_SC",
        "threatId": "NIST_04",
        "label": "Clé USB piégée introduite pour infecter un système interne, même isolé du réseau",
        "labelEn": "Booby-trapped USB drive introduced to infect an internal system, even air-gapped",
        "labelNl": "Geprepareerde USB-stick ingebracht om een intern, zelfs geïsoleerd systeem te besmetten"
      },
      {
        "id": "NIST_05_SC",
        "threatId": "NIST_05",
        "label": "Code malveillant inséré dans une dépendance ou un produit logiciel déployé",
        "labelEn": "Malicious code inserted into a dependency or deployed software product",
        "labelNl": "Kwaadaardige code ingevoegd in een afhankelijkheid of uitgerold softwareproduct"
      },
      {
        "id": "NIST_06_SC",
        "threatId": "NIST_06",
        "label": "Intrusion via un système mal configuré ou non autorisé exposé sur Internet",
        "labelEn": "Intrusion through a misconfigured or unauthorized system exposed to the Internet",
        "labelNl": "Inbraak via een verkeerd geconfigureerd of ongeautoriseerd systeem dat aan internet is blootgesteld"
      },
      {
        "id": "NIST_07_SC",
        "threatId": "NIST_07",
        "label": "Exploitation d'une vulnérabilité inconnue avant toute publication de correctif",
        "labelEn": "Exploitation of an unknown vulnerability before any patch is available",
        "labelNl": "Uitbuiting van een onbekende kwetsbaarheid voordat een patch beschikbaar is"
      },
      {
        "id": "NIST_08_SC",
        "threatId": "NIST_08",
        "label": "Portable compromis hors site puis reconnecté au réseau interne de l'organisation",
        "labelEn": "Laptop compromised off-site and then reconnected to the internal corporate network",
        "labelNl": "Buiten de organisatie besmette laptop wordt opnieuw met het interne netwerk verbonden"
      },
      {
        "id": "NIST_09_SC",
        "threatId": "NIST_09",
        "label": "Saturation coordonnée rendant les services exposés indisponibles au-delà du RTO",
        "labelEn": "Coordinated flooding making exposed services unavailable beyond the RTO",
        "labelNl": "Gecoördineerde overbelasting maakt blootgestelde diensten langer dan de RTO onbeschikbaar"
      },
      {
        "id": "NIST_10_SC",
        "threatId": "NIST_10",
        "label": "Essais massifs de mots de passe et bourrage d'identifiants sur les portails d'accès",
        "labelEn": "Mass password guessing and credential stuffing against access portals",
        "labelNl": "Massaal raden van wachtwoorden en credential stuffing op toegangsportalen"
      },
      {
        "id": "NIST_11_SC",
        "threatId": "NIST_11",
        "label": "Interception ou modification du trafic entre l'utilisateur et le service",
        "labelEn": "Interception or modification of traffic between the user and the service",
        "labelNl": "Onderschepping of wijziging van verkeer tussen de gebruiker en de dienst"
      },
      {
        "id": "NIST_12_SC",
        "threatId": "NIST_12",
        "label": "Vol d'un jeton de session valide pour agir au nom de l'utilisateur",
        "labelEn": "Theft of a valid session token to act as the user",
        "labelNl": "Diefstal van een geldig sessietoken om namens de gebruiker te handelen"
      },
      {
        "id": "NIST_13_SC",
        "threatId": "NIST_13",
        "label": "Manipulation d'un collaborateur par téléphone ou message pour obtenir un accès ou une information sensible",
        "labelEn": "Manipulating an employee by phone or message to obtain access or sensitive information",
        "labelNl": "Manipulatie van een medewerker via telefoon of bericht om toegang of gevoelige informatie te verkrijgen"
      },
      {
        "id": "NIST_14_SC",
        "threatId": "NIST_14",
        "label": "Contournement des flux légitimes via ports, protocoles ou services non autorisés",
        "labelEn": "Bypassing legitimate flows through unauthorized ports, protocols or services",
        "labelNl": "Omzeiling van legitieme stromen via ongeautoriseerde poorten, protocollen of diensten"
      },
      {
        "id": "NIST_15_SC",
        "threatId": "NIST_15",
        "label": "Intrusion physique sur site pour voler, saboter ou accéder aux équipements critiques",
        "labelEn": "Physical intrusion on-site to steal, sabotage or access critical equipment",
        "labelNl": "Fysieke inbraak op de site om kritieke apparatuur te stelen, saboteren of benaderen"
      },
      {
        "id": "NIST_16_SC",
        "threatId": "NIST_16",
        "label": "Extraction discrète de données sensibles vers une infrastructure contrôlée par l'attaquant",
        "labelEn": "Covert extraction of sensitive data to attacker-controlled infrastructure",
        "labelNl": "Heimelijke overdracht van gevoelige gegevens naar infrastructuur van de aanvaller"
      },
      {
        "id": "NIST_17_SC",
        "threatId": "NIST_17",
        "label": "Modification ou injection de données fausses mais plausibles dans les systèmes critiques",
        "labelEn": "Modification or injection of false but believable data into critical systems",
        "labelNl": "Wijziging of injectie van valse maar geloofwaardige gegevens in kritieke systemen"
      },
      {
        "id": "NIST_18_SC",
        "threatId": "NIST_18",
        "label": "Attaquant durablement implanté, effaçant ses traces et adaptant ses actions à la surveillance",
        "labelEn": "Long-term implanted attacker erasing traces and adapting actions to evade monitoring",
        "labelNl": "Langdurig genestelde aanvaller wist sporen en past acties aan om detectie te ontwijken"
      },
      {
        "id": "NIST_19_SC",
        "threatId": "NIST_19",
        "label": "Incendie du site principal détruisant équipements et données hébergées localement",
        "labelEn": "Fire at the primary site destroying equipment and locally hosted data",
        "labelNl": "Brand op de hoofdsite vernietigt apparatuur en lokaal gehoste gegevens"
      },
      {
        "id": "NIST_20_SC",
        "threatId": "NIST_20",
        "label": "Inondation ou fuite d'eau rendant la salle informatique inutilisable",
        "labelEn": "Flooding or water leak making the server room unusable",
        "labelNl": "Overstroming of waterlek maakt het serverlokaal langdurig onbruikbaar"
      },
      {
        "id": "NIST_21_SC",
        "threatId": "NIST_21",
        "label": "Défaillance en série de disques ou d'équipements entraînant arrêt ou perte de données",
        "labelEn": "Cascading disk or equipment failure causing outage or data loss",
        "labelNl": "Opeenvolgende defecten aan schijven of apparatuur veroorzaken uitval of gegevensverlies"
      },
      {
        "id": "NIST_22_SC",
        "threatId": "NIST_22",
        "label": "Mauvaise manipulation exposant, altérant ou supprimant des données par un utilisateur autorisé",
        "labelEn": "Mishandling by an authorized user exposing, altering or deleting data",
        "labelNl": "Verkeerde handeling van een bevoegde gebruiker die gegevens blootstelt, wijzigt of wist"
      },
      {
        "id": "NIST_23_SC",
        "threatId": "NIST_23",
        "label": "Droits ou configuration erronés appliqués en production par un administrateur",
        "labelEn": "Incorrect privileges or configuration applied to production by an administrator",
        "labelNl": "Foutieve rechten of configuratie door een beheerder toegepast in productie"
      },
      {
        "id": "NIST_24_SC",
        "threatId": "NIST_24",
        "label": "Saturation de stockage, calcul ou bande passante dégradant progressivement le service",
        "labelEn": "Storage, compute or bandwidth saturation progressively degrading the service",
        "labelNl": "Verzadiging van opslag, rekenkracht of bandbreedte tast de dienst geleidelijk aan"
      },
      {
        "id": "NIST_25_SC",
        "threatId": "NIST_25",
        "label": "Interruption prolongée d'un service externalisé essentiel : cloud, hébergeur, opérateur",
        "labelEn": "Extended outage of an essential outsourced service: cloud, hosting, telecom",
        "labelNl": "Langdurige onderbreking van een essentiële uitbestede dienst: cloud, hosting, telecom"
      },
      {
        "id": "NIST_26_SC",
        "threatId": "NIST_26",
        "label": "Tempête ou coupure d'énergie prolongée interrompant l'alimentation du site",
        "labelEn": "Storm or extended power outage cutting supply to the site",
        "labelNl": "Storm of langdurige stroomonderbreking legt de voeding van de site stil"
      }
    ]
  };
})();
