FIRST CSIRT Case Categories and VERIS
For each FIRST category we ask “What VERIS variables can we derive from this?” If not directly derived, we also look for what assumptions can be safely made. There are also some questions/notes because some categories could be used in many ways that would arrive at different VERIS classifications.