curl http://openioc.org/terms/Current.iocterms | grep data-type | sed -E 's/^.* text=\"([^\"]+).*$/\1/g' > terms.csv

Felix Barbalet
2017-09-10T20:10:55Z

terms.csv

We can make this file beautiful and searchable if this error is corrected: No commas found in this CSV file in line 0.

| ArpEntryItem/CacheType
| ArpEntryItem/IPv4Address
| ArpEntryItem/Interface
| ArpEntryItem/PhysicalAddress
| CookieHistoryItem/BrowserName
| CookieHistoryItem/BrowserVersion
| CookieHistoryItem/CookieFlags
| CookieHistoryItem/CookieName
| CookieHistoryItem/CookiePath
| CookieHistoryItem/CookieValue
| CookieHistoryItem/CreationDate
| CookieHistoryItem/ExpirationDate
| CookieHistoryItem/FileName
| CookieHistoryItem/FilePath
| CookieHistoryItem/HostName
| CookieHistoryItem/IsHttpOnly
| CookieHistoryItem/IsSecure
| CookieHistoryItem/LastAccessedDate
| CookieHistoryItem/LastModifiedDate
| CookieHistoryItem/Profile
| CookieHistoryItem/Username
| DiskItem/DiskName
| DiskItem/DiskSize
| DiskItem/PartitionList/Partition/PartitionLength
| DiskItem/PartitionList/Partition/PartitionNumber
| DiskItem/PartitionList/Partition/PartitionOffset
| DiskItem/PartitionList/Partition/PartitionType
| DnsEntryItem/DataLength
| DnsEntryItem/Flags
| DnsEntryItem/Host
| DnsEntryItem/RecordData/Host
| DnsEntryItem/RecordData/IPv4Address
| DnsEntryItem/RecordName
| DnsEntryItem/RecordType
| DnsEntryItem/TimeToLive
| DriverItem/CertificateIssuer
| DriverItem/CertificateSubject
| DriverItem/DeviceItem/AttachedDeviceName
| DriverItem/DeviceItem/AttachedDeviceObject
| DriverItem/DeviceItem/AttachedDriverName
| DriverItem/DeviceItem/AttachedDriverObject
| DriverItem/DeviceItem/AttachedToDeviceName
| DriverItem/DeviceItem/AttachedToDeviceObject
| DriverItem/DeviceItem/AttachedToDriverName
| DriverItem/DeviceItem/AttachedToDriverObject
| DriverItem/DeviceItem/DeviceName
| DriverItem/DeviceItem/DeviceObject
| DriverItem/DeviceItem/DriverName
| DriverItem/DriverInit
| DriverItem/DriverName
| DriverItem/DriverObjectAddress
| DriverItem/DriverStartIo
| DriverItem/DriverUnload
| DriverItem/ImageBase
| DriverItem/ImageSize
| DriverItem/Md5sum
| DriverItem/PEInfo/BaseAddress
| DriverItem/PEInfo/DetectedAnomalies/string
| DriverItem/PEInfo/DetectedEntryPointSignature/Name
| DriverItem/PEInfo/DetectedEntryPointSignature/Type
| DriverItem/PEInfo/DigitalSignature/CertificateIssuer
| DriverItem/PEInfo/DigitalSignature/CertificateSubject
| DriverItem/PEInfo/DigitalSignature/Description
| DriverItem/PEInfo/DigitalSignature/SignatureExists
| DriverItem/PEInfo/DigitalSignature/SignatureVerified
| DriverItem/PEInfo/EpJumpCodes/Depth
| DriverItem/PEInfo/EpJumpCodes/Opcodes
| DriverItem/PEInfo/Exports/ExportedFunctions/string
| DriverItem/PEInfo/Exports/ExportsTimeStamp
| DriverItem/PEInfo/Exports/DllName
| DriverItem/PEInfo/Exports/NumberOfFunctions
| DriverItem/PEInfo/Exports/NumberOfNames
| DriverItem/PEInfo/ExtraneousBytes
| DriverItem/PEInfo/ImportedModules/Module/ImportedFunctions/string
| DriverItem/PEInfo/ImportedModules/Module/Name
| DriverItem/PEInfo/PEChecksum/PEComputedAPI
| DriverItem/PEInfo/PEChecksum/PEFileAPI
| DriverItem/PEInfo/PEChecksum/PEFileRaw
| DriverItem/PEInfo/PETimeStamp
| DriverItem/PEInfo/Sections/Section/DetectedCharacteristics
| DriverItem/PEInfo/Sections/Section/DetectedSignatureKeys/string
| DriverItem/PEInfo/Sections/Section/Entropy/CurveData/float
| DriverItem/PEInfo/Sections/Section/Name
| DriverItem/PEInfo/Sections/Section/SizeInBytes
| DriverItem/PEInfo/Sections/Section/Type
| DriverItem/PEInfo/Subsystem
| DriverItem/PEInfo/Type
| DriverItem/Sha1sum
| DriverItem/Sha256sum
| DriverItem/SignatureDescription
| DriverItem/SignatureExists
| DriverItem/SignatureVerified
| DriverItem/StringList/string
| Email/Attachment/Content
| Email/Attachment/MIMEType
| Email/Attachment/Name
| Email/Attachment/SizeInBytes
| Email/AttachmentCount
| Email/BCC
| Email/Body
| Email/CC
| Email/Content-Type
| Email/Date
| Email/From
| Email/In-Reply-To
| Email/MIME-Version
| Email/Received
| Email/ReceivedFromHost
| Email/ReceivedFromIP
| Email/References
| Email/Return-Path
| Email/Subject
| Email/Thread-Index
| Email/Thread-Topic
| Email/To
| Email/X-MS-Has-Attach
| Email/X-filenames
| Email/X-filesizes
| Email/X-filetypes
| EventLogItem/CorrelationActivityId
| EventLogItem/CorrelationRelatedActivityId
| EventLogItem/EID
| EventLogItem/ExecutionProcessId
| EventLogItem/ExecutionThreadId
| EventLogItem/blob
| EventLogItem/category
| EventLogItem/categoryNum
| EventLogItem/genTime
| EventLogItem/index
| EventLogItem/log
| EventLogItem/machine
| EventLogItem/message
| EventLogItem/reserved
| EventLogItem/source
| EventLogItem/type
| EventLogItem/unformattedMessage/string
| EventLogItem/user
| EventLogItem/writeTime
| FileDownloadHistoryItem/AutoResume
| FileDownloadHistoryItem/BrowserName
| FileDownloadHistoryItem/BrowserVersion
| FileDownloadHistoryItem/BytesDownloaded
| FileDownloadHistoryItem/CacheFlags
| FileDownloadHistoryItem/CacheHitCount
| FileDownloadHistoryItem/DownloadType
| FileDownloadHistoryItem/EndDate
| FileDownloadHistoryItem/FileName
| FileDownloadHistoryItem/FullHttpHeader
| FileDownloadHistoryItem/LastAccessedDate
| FileDownloadHistoryItem/LastCacheSynchDate
| FileDownloadHistoryItem/LastCheckedDate
| FileDownloadHistoryItem/LastModifiedDate
| FileDownloadHistoryItem/MaxBytes
| FileDownloadHistoryItem/MimeType
| FileDownloadHistoryItem/Profile
| FileDownloadHistoryItem/Referrer
| FileDownloadHistoryItem/SourceURL
| FileDownloadHistoryItem/StartDate
| FileDownloadHistoryItem/State
| FileDownloadHistoryItem/TargetDirectory
| FileDownloadHistoryItem/TemporaryPath
| FileDownloadHistoryItem/Username
| FileItem/Accessed
| FileItem/Changed
| FileItem/Created
| FileItem/DevicePath
| FileItem/Drive
| FileItem/FileAttributes
| FileItem/FileExtension
| FileItem/FileName
| FileItem/FilePath
| FileItem/FilenameAccessed
| FileItem/FilenameChanged
| FileItem/FilenameCreated
| FileItem/FilenameModified
| FileItem/FullPath
| FileItem/INode
| FileItem/Md5sum
| FileItem/Modified
| FileItem/detectedAnomaly
| FileItem/PEInfo/BaseAddress
| FileItem/PEInfo/DetectedAnomalies/string
| FileItem/PEInfo/DetectedEntryPointSignature/Name
| FileItem/PEInfo/DetectedEntryPointSignature/Type
| FileItem/PEInfo/DigitalSignature/CertificateIssuer
| FileItem/PEInfo/DigitalSignature/CertificateSubject
| FileItem/PEInfo/DigitalSignature/Description
| FileItem/PEInfo/DigitalSignature/SignatureExists
| FileItem/PEInfo/DigitalSignature/SignatureVerified
| FileItem/PEInfo/EpJumpCodes/Depth
| FileItem/PEInfo/EpJumpCodes/Opcodes
| FileItem/PEInfo/Exports/DllName
| FileItem/PEInfo/Exports/ExportedFunctions/string
| FileItem/PEInfo/Exports/ExportsTimeStamp
| FileItem/PEInfo/Exports/NumberOfFunctions
| FileItem/PEInfo/Exports/NumberOfNames
| FileItem/PEInfo/ExtraneousBytes
| FileItem/PEInfo/ImportedModules/Module/ImportedFunctions/string
| FileItem/PEInfo/ImportedModules/Module/Name
| FileItem/PEInfo/ImportedModules/Module/NumberOfFunctions
| FileItem/PEInfo/PEChecksum/PEComputedAPI
| FileItem/PEInfo/PEChecksum/PEFileAPI
| FileItem/PEInfo/PEChecksum/PEFileRaw
| FileItem/PEInfo/PETimeStamp
| FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Data
| FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Language
| FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Name
| FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Size
| FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Type
| FileItem/PEInfo/Sections/NumberOfSections
| FileItem/PEInfo/Sections/ActualNumberOfSections
| FileItem/PEInfo/Sections/Section/DetectedCharacteristics
| FileItem/PEInfo/Sections/Section/DetectedSignatureKeys/string
| FileItem/PEInfo/Sections/Section/Entropy/CurveData/float
| FileItem/PEInfo/Sections/Section/Name
| FileItem/PEInfo/Sections/Section/SizeInBytes
| FileItem/PEInfo/Sections/Section/Type
| FileItem/PEInfo/Subsystem
| FileItem/PEInfo/Type
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/Comments
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/CompanyName
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileDescription
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileVersion
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/InternalName
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/Language
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalCopyright
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalTrademarks
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/OriginalFilename
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/PrivateBuild
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductName
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductVersion
| FileItem/PEInfo/VersionInfoList/VersionInfoItem/SpecialBuild
| FileItem/PeakCodeEntropy
| FileItem/PeakEntropy
| FileItem/SecurityID
| FileItem/SecurityType
| FileItem/Sha1sum
| FileItem/Sha256sum
| FileItem/SizeInBytes
| FileItem/StreamList/Stream/Md5sum
| FileItem/StreamList/Stream/Name
| FileItem/StreamList/Stream/Sha1sum
| FileItem/StreamList/Stream/Sha256sum
| FileItem/StreamList/Stream/SizeInBytes
| FileItem/StringList/string
| FileItem/Username
| FormHistoryItem/BrowserName
| FormHistoryItem/BrowserVersion
| FormHistoryItem/CreationDate
| FormHistoryItem/EncryptedPassword
| FormHistoryItem/EncryptionType
| FormHistoryItem/FirstUsedDate
| FormHistoryItem/FormFieldName
| FormHistoryItem/FormFieldValue
| FormHistoryItem/FormSubmitURL
| FormHistoryItem/FormType
| FormHistoryItem/Guid
| FormHistoryItem/HostName
| FormHistoryItem/HttpRealm
| FormHistoryItem/LastUsedDate
| FormHistoryItem/PasswordFieldName
| FormHistoryItem/Profile
| FormHistoryItem/TimesUsed
| FormHistoryItem/Username
| FormHistoryItem/UsernameFieldName
| FormHistoryItem/UsernameFieldValue
| HiveItem/Name
| HiveItem/Path
| HookItem/DigitalSignatureHooked/CertificateIssuer
| HookItem/DigitalSignatureHooked/CertificateSubject
| HookItem/DigitalSignatureHooked/Description
| HookItem/DigitalSignatureHooked/SignatureExists
| HookItem/DigitalSignatureHooked/SignatureVerified
| HookItem/DigitalSignatureHooking/CertificateIssuer
| HookItem/DigitalSignatureHooking/CertificateSubject
| HookItem/DigitalSignatureHooking/Description
| HookItem/DigitalSignatureHooking/SignatureExists
| HookItem/DigitalSignatureHooking/SignatureVerified
| HookItem/HookDescription
| HookItem/HookedFunction
| HookItem/HookedModule
| HookItem/HookingAddress
| HookItem/HookingModule
| ModuleItem/ModuleAddress
| ModuleItem/ModuleBase
| ModuleItem/ModuleInit
| ModuleItem/ModuleName
| ModuleItem/ModulePath
| ModuleItem/ModuleSize
| Network/DNS
| Network/HTTP_Referr
| Network/String
| Network/URI
| Network/UserAgent
| PortItem/CreationTime
| PortItem/localIP
| PortItem/localPort
| PortItem/path
| PortItem/pid
| PortItem/process
| PortItem/protocol
| PortItem/remoteIP
| PortItem/remotePort
| PortItem/state
| PrefetchItem/AccessedFileList/AccessedFile
| PrefetchItem/ApplicationFileName
| PrefetchItem/ApplicationFullPath
| PrefetchItem/Created
| PrefetchItem/FullPath
| PrefetchItem/LastRun
| PrefetchItem/PrefetchHash
| PrefetchItem/VolumeList/VolumeItem/DevicePath
| PrefetchItem/VolumeList/VolumeItem/CreationTime
| PrefetchItem/VolumeList/VolumeItem/SerialNumber
| PrefetchItem/ReportedSizeInBytes
| PrefetchItem/SizeInBytes
| PrefetchItem/TimesExecuted
| ProcessItem/HandleList/Handle/AccessMask
| ProcessItem/HandleList/Handle/HandleCount
| ProcessItem/HandleList/Handle/Index
| ProcessItem/HandleList/Handle/Name
| ProcessItem/HandleList/Handle/ObjectAddress
| ProcessItem/HandleList/Handle/PointerCount
| ProcessItem/HandleList/Handle/Type
| ProcessItem/PortList/PortItem/CreationTime
| ProcessItem/PortList/PortItem/localIP
| ProcessItem/PortList/PortItem/localPort
| ProcessItem/PortList/PortItem/path
| ProcessItem/PortList/PortItem/pid
| ProcessItem/PortList/PortItem/process
| ProcessItem/PortList/PortItem/protocol
| ProcessItem/PortList/PortItem/remoteIP
| ProcessItem/PortList/PortItem/remotePort
| ProcessItem/PortList/PortItem/state
| ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateIssuer
| ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateSubject
| ProcessItem/SectionList/MemorySection/DigitalSignature/Description
| ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureExists
| ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureVerified
| ProcessItem/SectionList/MemorySection/Injected
| ProcessItem/SectionList/MemorySection/Mapped
| ProcessItem/SectionList/MemorySection/Md5sum
| ProcessItem/SectionList/MemorySection/Name
| ProcessItem/SectionList/MemorySection/PEInfo/BaseAddress
| ProcessItem/SectionList/MemorySection/PEInfo/DetectedAnomalies/string
| ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Name
| ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Type
| ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateIssuer
| ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateSubject
| ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/Description
| ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureExists
| ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureVerified
| ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Depth
| ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Opcodes
| ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportedFunctions/string
| ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportsTimeStamp
| ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfFunctions
| ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfNames
| ProcessItem/SectionList/MemorySection/PEInfo/ExtraneousBytes
| ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/ImportedFunctions/string
| ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/Name
| ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEComputedAPI
| ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileAPI
| ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileRaw
| ProcessItem/SectionList/MemorySection/PEInfo/PETimeStamp
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedCharacteristics
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedSignatureKeys/string
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Entropy/CurveData/float
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Name
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/SizeInBytes
| ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Type
| ProcessItem/SectionList/MemorySection/PEInfo/Subsystem
| ProcessItem/SectionList/MemorySection/PEInfo/Type
| ProcessItem/SectionList/MemorySection/Protection
| ProcessItem/SectionList/MemorySection/RawFlags
| ProcessItem/SectionList/MemorySection/RegionSize
| ProcessItem/SectionList/MemorySection/RegionStart
| ProcessItem/SectionList/MemorySection/Sha1sum
| ProcessItem/SectionList/MemorySection/Sha256sum
| ProcessItem/SecurityID
| ProcessItem/SecurityType
| ProcessItem/StringList/string
| ProcessItem/Username
| ProcessItem/arguments
| ProcessItem/detectedAnomaly
| ProcessItem/hidden
| ProcessItem/kernelTime
| ProcessItem/name
| ProcessItem/parentpid
| ProcessItem/path
| ProcessItem/pid
| ProcessItem/startTime
| ProcessItem/userTime
| RegistryItem/Hive
| RegistryItem/KeyPath
| RegistryItem/Modified
| RegistryItem/NumSubKeys
| RegistryItem/NumValues
| RegistryItem/Path
| RegistryItem/ReportedLengthInBytes
| RegistryItem/Text
| RegistryItem/Type
| RegistryItem/Username
| RegistryItem/Value
| RegistryItem/ValueName
| RegistryItem/detectedAnomaly
| RouteEntryItem/Destination
| RouteEntryItem/Gateway
| RouteEntryItem/Interface
| RouteEntryItem/IsIPv6
| RouteEntryItem/Metric
| RouteEntryItem/Netmask
| RouteEntryItem/Protocol
| RouteEntryItem/RouteAge
| RouteEntryItem/RouteType
| ServiceItem/arguments
| ServiceItem/description
| ServiceItem/descriptiveName
| ServiceItem/mode
| ServiceItem/name
| ServiceItem/path
| ServiceItem/pathCertificateIssuer
| ServiceItem/pathCertificateSubject
| ServiceItem/pathSignatureDescription
| ServiceItem/pathSignatureExists
| ServiceItem/pathSignatureVerified
| ServiceItem/pathmd5sum
| ServiceItem/pathsha1sum
| ServiceItem/pathsha256sum
| ServiceItem/pid
| ServiceItem/serviceDLL
| ServiceItem/serviceDLLCertificateIssuer
| ServiceItem/serviceDLLCertificateSubject
| ServiceItem/serviceDLLSignatureDescription
| ServiceItem/serviceDLLSignatureExists
| ServiceItem/serviceDLLSignatureVerified
| ServiceItem/serviceDLLmd5sum
| ServiceItem/serviceDLLsha1sum
| ServiceItem/serviceDLLsha256sum
| ServiceItem/startedAs
| ServiceItem/status
| ServiceItem/type
| Snort/Snort
| SystemInfoItem/MAC
| SystemInfoItem/OS
| SystemInfoItem/availphysical
| SystemInfoItem/biosInfo/biosDate
| SystemInfoItem/biosInfo/biosVersion
| SystemInfoItem/buildNumber
| SystemInfoItem/date
| SystemInfoItem/directory
| SystemInfoItem/domain
| SystemInfoItem/hostname
| SystemInfoItem/installDate
| SystemInfoItem/machine
| SystemInfoItem/networkArray/networkInfo/MAC
| SystemInfoItem/networkArray/networkInfo/adapter
| SystemInfoItem/networkArray/networkInfo/description
| SystemInfoItem/networkArray/networkInfo/dhcpLeaseExpires
| SystemInfoItem/networkArray/networkInfo/dhcpLeaseObtained
| SystemInfoItem/networkArray/networkInfo/dhcpServerArray/dhcpServer
| SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/ipAddress
| SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/subnetMask
| SystemInfoItem/networkArray/networkInfo/ipGatewayArray/ipGateway
| SystemInfoItem/patchLevel
| SystemInfoItem/procType
| SystemInfoItem/processor
| SystemInfoItem/productID
| SystemInfoItem/productName
| SystemInfoItem/regOrg
| SystemInfoItem/regOwner
| SystemInfoItem/timezoneDST
| SystemInfoItem/timezoneStandard
| SystemInfoItem/totalphysical
| SystemInfoItem/uptime
| SystemInfoItem/user
| SystemRestoreItem/RestorePointName
| SystemRestoreItem/RestorePointFullPath
| SystemRestoreItem/RestorePointDescription
| SystemRestoreItem/RestorePointType
| SystemRestoreItem/Created
| SystemRestoreItem/RegistryHives/String
| SystemRestoreItem/ChangeLogFileName
| SystemRestoreItem/ChangeLogEntrySequenceNumber
| SystemRestoreItem/ChangeLogEntryType
| SystemRestoreItem/ChangeLogEntryFlags
| SystemRestoreItem/FileAttributes
| SystemRestoreItem/OriginalFileName
| SystemRestoreItem/BackupFileName
| SystemRestoreItem/AclChangeUsername
| SystemRestoreItem/AclChangeSecurityID
| SystemRestoreItem/OriginalShortFileName
| TaskItem/AccountLogonType
| TaskItem/AccountName
| TaskItem/AccountRunLevel
| TaskItem/ActionList/Action/ActionType
| TaskItem/ActionList/Action/COMClassId
| TaskItem/ActionList/Action/COMData
| TaskItem/ActionList/Action/DigitalSignature/CertificateIssuer
| TaskItem/ActionList/Action/DigitalSignature/CertificateSubject
| TaskItem/ActionList/Action/DigitalSignature/Description
| TaskItem/ActionList/Action/DigitalSignature/SignatureExists
| TaskItem/ActionList/Action/DigitalSignature/SignatureVerified
| TaskItem/ActionList/Action/EmailAttachments
| TaskItem/ActionList/Action/EmailBCC
| TaskItem/ActionList/Action/EmailBody
| TaskItem/ActionList/Action/EmailCC
| TaskItem/ActionList/Action/EmailFrom
| TaskItem/ActionList/Action/EmailReplyTo
| TaskItem/ActionList/Action/EmailServer
| TaskItem/ActionList/Action/EmailSubject
| TaskItem/ActionList/Action/EmailTo
| TaskItem/ActionList/Action/ExecArguments
| TaskItem/ActionList/Action/ExecProgramMd5sum
| TaskItem/ActionList/Action/ExecProgramPath
| TaskItem/ActionList/Action/ExecProgramSha1sum
| TaskItem/ActionList/Action/ExecProgramSha256sum
| TaskItem/ActionList/Action/ExecWorkingDirectory
| TaskItem/ActionList/Action/ShowMessageBody
| TaskItem/ActionList/Action/ShowMessageTitle
| TaskItem/ApplicationName
| TaskItem/CertificateIssuer
| TaskItem/CertificateSubject
| TaskItem/Comment
| TaskItem/CreationDate
| TaskItem/Creator
| TaskItem/ExitCode
| TaskItem/Flag
| TaskItem/MaxRunTime
| TaskItem/MostRecentRunTime
| TaskItem/Name
| TaskItem/NextRunTime
| TaskItem/Parameters
| TaskItem/Priority
| TaskItem/SignatureDescription
| TaskItem/SignatureExists
| TaskItem/SignatureVerified
| TaskItem/Status
| TaskItem/TriggerList/Trigger/TriggerBegin
| TaskItem/TriggerList/Trigger/TriggerDelay
| TaskItem/TriggerList/Trigger/TriggerEnabled
| TaskItem/TriggerList/Trigger/TriggerEnd
| TaskItem/TriggerList/Trigger/TriggerFrequency
| TaskItem/TriggerList/Trigger/TriggerMaxRunTime
| TaskItem/TriggerList/Trigger/TriggerSessionChangeType
| TaskItem/TriggerList/Trigger/TriggerSubscription
| TaskItem/TriggerList/Trigger/TriggerUsername
| TaskItem/TriggerList/Trigger/TriggerValueQueries
| TaskItem/VirtualPath
| TaskItem/WorkItemData
| TaskItem/WorkingDirectory
| TaskItem/md5sum
| TaskItem/sha1sum
| TaskItem/sha256sum
| UrlHistoryItem/BrowserName
| UrlHistoryItem/BrowserVersion
| UrlHistoryItem/FirstBookmarkDate
| UrlHistoryItem/FirstVisitDate
| UrlHistoryItem/Hidden
| UrlHistoryItem/HostName
| UrlHistoryItem/IndexedContent
| UrlHistoryItem/LastVisitDate
| UrlHistoryItem/LastVisitDateLocal
| UrlHistoryItem/PageTitle
| UrlHistoryItem/Profile
| UrlHistoryItem/Thumbnail
| UrlHistoryItem/Typed
| UrlHistoryItem/URL
| UrlHistoryItem/Username
| UrlHistoryItem/VisitCount
| UrlHistoryItem/VisitFrom
| UrlHistoryItem/VisitType
| UserItem/LastLogin
| UserItem/SecurityID
| UserItem/SecurityType
| UserItem/Username
| UserItem/description
| UserItem/disabled
| UserItem/fullname
| UserItem/grouplist/groupname
| UserItem/homedirectory
| UserItem/lockedout
| UserItem/passwordrequired
| UserItem/scriptpath
| UserItem/userpasswordage
| VolumeItem/ActualAvailableAllocationUnits
| VolumeItem/BytesPerSector
| VolumeItem/CreationTime
| VolumeItem/DevicePath
| VolumeItem/DriveLetter
| VolumeItem/FileSystemFlags
| VolumeItem/FileSystemName
| VolumeItem/IsMounted
| VolumeItem/Name
| VolumeItem/SectorsPerAllocationUnit
| VolumeItem/SerialNumber
| VolumeItem/TotalAllocationUnits
| VolumeItem/Type
| VolumeItem/VolumeName