advanced_template.md

System Description

{tm.description}

Dataflow Diagram - Level 0 DFD

 

Dataflows

Name	From	To	Data	Protocol	Port
{dataflows:repeat:	{{item.display_name:call:}}	{{item.source.name}}	{{item.sink.name}}	{{item.data}}	{{item.protocol}}
}

Data Dictionary

Name	Description	Classification	Carried	Processed
{data:repeat:	{{item.name}}	{{item.description}}	{{item.classification.name}}	{{item.carriedBy:repeat:{{{{item.name}}}} }}
}

Actors

{actors:repeat:

Name	{{item.name}}
Description	{{item.description}}
Is Admin	{{item.isAdmin}}
Finding Count	{{item:call:getFindingCount}}

{{item.findings:if:

Threats

{{item.findings:repeat:

{{{{item.id}}}} -- {{{{item.threat_id}}}} -- {{{{item.description}}}}

Targeted Element

{{{{item.target}}}}

Severity

{{{{item.severity}}}}

Example Instances

{{{{item.example}}}}

Mitigations

{{{{item.mitigations}}}}

References

{{{{item.references}}}}

 

}} }} }

Boundaries

{boundaries:repeat:

Name	{{item.name}}
Description	{{item.description}}
In Scope	{{item.inScope}}
Immediate Parent	{{item.parents:if:{{item:call:getParentName}}}}{{item.parents:not:N/A, primary boundary}}
All Parents	{{item.parents:call:{{{{item.display_name:call:}}}}, }}
Classification	{{item.maxClassification}}
Finding Count	{{item:call:getFindingCount}}

{{item.findings:if:

Threats

{{item.findings:repeat:

{{{{item.id}}}} -- {{{{item.threat_id}}}} -- {{{{item.description}}}}

Targeted Element

{{{{item.target}}}}

Severity

{{{{item.severity}}}}

Example Instances

{{{{item.example}}}}

Mitigations

{{{{item.mitigations}}}}

References

{{{{item.references}}}}

 

}} }} }

Assets

{assets:repeat:

Name	{{item.name}}
Description	{{item.description}}
In Scope	{{item.inScope}}
Type	{{item:call:getElementType}}
Finding Count	{{item:call:getFindingCount}}

{{item.findings:if:

Threats

{{item.findings:repeat:

{{{{item.id}}}} -- {{{{item.threat_id}}}} -- {{{{item.description}}}}

Targeted Element

{{{{item.target}}}}

Severity

{{{{item.severity}}}}

Example Instances

{{{{item.example}}}}

Mitigations

{{{{item.mitigations}}}}

References

{{{{item.references}}}}

 

}} }} }

Data Flows

{dataflows:repeat:

Name	{{item.name}}
Description	{{item.description}}
Sink	{{item.sink}}
Source	{{item.source}}
Is Response	{{item.isResponse}}
In Scope	{{item.inScope}}
Finding Count	{{item:call:getFindingCount}}

{{item.findings:if:

Threats

{{item.findings:repeat:

{{{{item.id}}}} -- {{{{item.threat_id}}}} -- {{{{item.description}}}}

Targeted Element

{{{{item.target}}}}

Severity

{{{{item.severity}}}}

Example Instances

{{{{item.example}}}}

Mitigations

{{{{item.mitigations}}}}

References

{{{{item.references}}}}

 

}} }} }

{tm.excluded_findings:if:

Excluded Threats

}

{tm.excluded_findings:repeat:

{{item.id}} -- {{item.threat_id}} -- {{item.description}}

**{{item.threat_id}}** was excluded for **{{item.target}}** because of the assumption: "{{item.assumption.name}} "

{{item.assumption.description:if:

Assumption description

{{item.assumption.description}}

}}

Targeted Element

{{item.target}}

Severity

{{item.severity}}

Example Instances

{{item.example}}

References

{{item.references}}

}