curl http://openioc.org/terms/Current.iocterms | grep data-type | sed -E 's/^.* text=\"([^\"]+).*$/\1/g' > terms.csv

terms.csv

ArpEntryItem/CacheType
ArpEntryItem/IPv4Address
ArpEntryItem/Interface
ArpEntryItem/PhysicalAddress
CookieHistoryItem/BrowserName
CookieHistoryItem/BrowserVersion
CookieHistoryItem/CookieFlags
CookieHistoryItem/CookieName
CookieHistoryItem/CookiePath
CookieHistoryItem/CookieValue
CookieHistoryItem/CreationDate
CookieHistoryItem/ExpirationDate
CookieHistoryItem/FileName
CookieHistoryItem/FilePath
CookieHistoryItem/HostName
CookieHistoryItem/IsHttpOnly
CookieHistoryItem/IsSecure
CookieHistoryItem/LastAccessedDate
CookieHistoryItem/LastModifiedDate
CookieHistoryItem/Profile
CookieHistoryItem/Username
DiskItem/DiskName
DiskItem/DiskSize
DiskItem/PartitionList/Partition/PartitionLength
DiskItem/PartitionList/Partition/PartitionNumber
DiskItem/PartitionList/Partition/PartitionOffset
DiskItem/PartitionList/Partition/PartitionType
DnsEntryItem/DataLength
DnsEntryItem/Flags
DnsEntryItem/Host
DnsEntryItem/RecordData/Host
DnsEntryItem/RecordData/IPv4Address
DnsEntryItem/RecordName
DnsEntryItem/RecordType
DnsEntryItem/TimeToLive
DriverItem/CertificateIssuer
DriverItem/CertificateSubject
DriverItem/DeviceItem/AttachedDeviceName
DriverItem/DeviceItem/AttachedDeviceObject
DriverItem/DeviceItem/AttachedDriverName
DriverItem/DeviceItem/AttachedDriverObject
DriverItem/DeviceItem/AttachedToDeviceName
DriverItem/DeviceItem/AttachedToDeviceObject
DriverItem/DeviceItem/AttachedToDriverName
DriverItem/DeviceItem/AttachedToDriverObject
DriverItem/DeviceItem/DeviceName
DriverItem/DeviceItem/DeviceObject
DriverItem/DeviceItem/DriverName
DriverItem/DriverInit
DriverItem/DriverName
DriverItem/DriverObjectAddress
DriverItem/DriverStartIo
DriverItem/DriverUnload
DriverItem/ImageBase
DriverItem/ImageSize
DriverItem/Md5sum
DriverItem/PEInfo/BaseAddress
DriverItem/PEInfo/DetectedAnomalies/string
DriverItem/PEInfo/DetectedEntryPointSignature/Name
DriverItem/PEInfo/DetectedEntryPointSignature/Type
DriverItem/PEInfo/DigitalSignature/CertificateIssuer
DriverItem/PEInfo/DigitalSignature/CertificateSubject
DriverItem/PEInfo/DigitalSignature/Description
DriverItem/PEInfo/DigitalSignature/SignatureExists
DriverItem/PEInfo/DigitalSignature/SignatureVerified
DriverItem/PEInfo/EpJumpCodes/Depth
DriverItem/PEInfo/EpJumpCodes/Opcodes
DriverItem/PEInfo/Exports/ExportedFunctions/string
DriverItem/PEInfo/Exports/ExportsTimeStamp
DriverItem/PEInfo/Exports/DllName
DriverItem/PEInfo/Exports/NumberOfFunctions
DriverItem/PEInfo/Exports/NumberOfNames
DriverItem/PEInfo/ExtraneousBytes
DriverItem/PEInfo/ImportedModules/Module/ImportedFunctions/string
DriverItem/PEInfo/ImportedModules/Module/Name
DriverItem/PEInfo/PEChecksum/PEComputedAPI
DriverItem/PEInfo/PEChecksum/PEFileAPI
DriverItem/PEInfo/PEChecksum/PEFileRaw
DriverItem/PEInfo/PETimeStamp
DriverItem/PEInfo/Sections/Section/DetectedCharacteristics
DriverItem/PEInfo/Sections/Section/DetectedSignatureKeys/string
DriverItem/PEInfo/Sections/Section/Entropy/CurveData/float
DriverItem/PEInfo/Sections/Section/Name
DriverItem/PEInfo/Sections/Section/SizeInBytes
DriverItem/PEInfo/Sections/Section/Type
DriverItem/PEInfo/Subsystem
DriverItem/PEInfo/Type
DriverItem/Sha1sum
DriverItem/Sha256sum
DriverItem/SignatureDescription
DriverItem/SignatureExists
DriverItem/SignatureVerified
DriverItem/StringList/string
Email/Attachment/Content
Email/Attachment/MIMEType
Email/Attachment/Name
Email/Attachment/SizeInBytes
Email/AttachmentCount
Email/BCC
Email/Body
Email/CC
Email/Content-Type
Email/Date
Email/From
Email/In-Reply-To
Email/MIME-Version
Email/Received
Email/ReceivedFromHost
Email/ReceivedFromIP
Email/References
Email/Return-Path
Email/Subject
Email/Thread-Index
Email/Thread-Topic
Email/To
Email/X-MS-Has-Attach
Email/X-filenames
Email/X-filesizes
Email/X-filetypes
EventLogItem/CorrelationActivityId
EventLogItem/CorrelationRelatedActivityId
EventLogItem/EID
EventLogItem/ExecutionProcessId
EventLogItem/ExecutionThreadId
EventLogItem/blob
EventLogItem/category
EventLogItem/categoryNum
EventLogItem/genTime
EventLogItem/index
EventLogItem/log
EventLogItem/machine
EventLogItem/message
EventLogItem/reserved
EventLogItem/source
EventLogItem/type
EventLogItem/unformattedMessage/string
EventLogItem/user
EventLogItem/writeTime
FileDownloadHistoryItem/AutoResume
FileDownloadHistoryItem/BrowserName
FileDownloadHistoryItem/BrowserVersion
FileDownloadHistoryItem/BytesDownloaded
FileDownloadHistoryItem/CacheFlags
FileDownloadHistoryItem/CacheHitCount
FileDownloadHistoryItem/DownloadType
FileDownloadHistoryItem/EndDate
FileDownloadHistoryItem/FileName
FileDownloadHistoryItem/FullHttpHeader
FileDownloadHistoryItem/LastAccessedDate
FileDownloadHistoryItem/LastCacheSynchDate
FileDownloadHistoryItem/LastCheckedDate
FileDownloadHistoryItem/LastModifiedDate
FileDownloadHistoryItem/MaxBytes
FileDownloadHistoryItem/MimeType
FileDownloadHistoryItem/Profile
FileDownloadHistoryItem/Referrer
FileDownloadHistoryItem/SourceURL
FileDownloadHistoryItem/StartDate
FileDownloadHistoryItem/State
FileDownloadHistoryItem/TargetDirectory
FileDownloadHistoryItem/TemporaryPath
FileDownloadHistoryItem/Username
FileItem/Accessed
FileItem/Changed
FileItem/Created
FileItem/DevicePath
FileItem/Drive
FileItem/FileAttributes
FileItem/FileExtension
FileItem/FileName
FileItem/FilePath
FileItem/FilenameAccessed
FileItem/FilenameChanged
FileItem/FilenameCreated
FileItem/FilenameModified
FileItem/FullPath
FileItem/INode
FileItem/Md5sum
FileItem/Modified
FileItem/detectedAnomaly
FileItem/PEInfo/BaseAddress
FileItem/PEInfo/DetectedAnomalies/string
FileItem/PEInfo/DetectedEntryPointSignature/Name
FileItem/PEInfo/DetectedEntryPointSignature/Type
FileItem/PEInfo/DigitalSignature/CertificateIssuer
FileItem/PEInfo/DigitalSignature/CertificateSubject
FileItem/PEInfo/DigitalSignature/Description
FileItem/PEInfo/DigitalSignature/SignatureExists
FileItem/PEInfo/DigitalSignature/SignatureVerified
FileItem/PEInfo/EpJumpCodes/Depth
FileItem/PEInfo/EpJumpCodes/Opcodes
FileItem/PEInfo/Exports/DllName
FileItem/PEInfo/Exports/ExportedFunctions/string
FileItem/PEInfo/Exports/ExportsTimeStamp
FileItem/PEInfo/Exports/NumberOfFunctions
FileItem/PEInfo/Exports/NumberOfNames
FileItem/PEInfo/ExtraneousBytes
FileItem/PEInfo/ImportedModules/Module/ImportedFunctions/string
FileItem/PEInfo/ImportedModules/Module/Name
FileItem/PEInfo/ImportedModules/Module/NumberOfFunctions
FileItem/PEInfo/PEChecksum/PEComputedAPI
FileItem/PEInfo/PEChecksum/PEFileAPI
FileItem/PEInfo/PEChecksum/PEFileRaw
FileItem/PEInfo/PETimeStamp
FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Data
FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Language
FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Name
FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Size
FileItem/PEInfo/ResourceInfoList/ResourceInfoItem/Type
FileItem/PEInfo/Sections/NumberOfSections
FileItem/PEInfo/Sections/ActualNumberOfSections
FileItem/PEInfo/Sections/Section/DetectedCharacteristics
FileItem/PEInfo/Sections/Section/DetectedSignatureKeys/string
FileItem/PEInfo/Sections/Section/Entropy/CurveData/float
FileItem/PEInfo/Sections/Section/Name
FileItem/PEInfo/Sections/Section/SizeInBytes
FileItem/PEInfo/Sections/Section/Type
FileItem/PEInfo/Subsystem
FileItem/PEInfo/Type
FileItem/PEInfo/VersionInfoList/VersionInfoItem/Comments
FileItem/PEInfo/VersionInfoList/VersionInfoItem/CompanyName
FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileDescription
FileItem/PEInfo/VersionInfoList/VersionInfoItem/FileVersion
FileItem/PEInfo/VersionInfoList/VersionInfoItem/InternalName
FileItem/PEInfo/VersionInfoList/VersionInfoItem/Language
FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalCopyright
FileItem/PEInfo/VersionInfoList/VersionInfoItem/LegalTrademarks
FileItem/PEInfo/VersionInfoList/VersionInfoItem/OriginalFilename
FileItem/PEInfo/VersionInfoList/VersionInfoItem/PrivateBuild
FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductName
FileItem/PEInfo/VersionInfoList/VersionInfoItem/ProductVersion
FileItem/PEInfo/VersionInfoList/VersionInfoItem/SpecialBuild
FileItem/PeakCodeEntropy
FileItem/PeakEntropy
FileItem/SecurityID
FileItem/SecurityType
FileItem/Sha1sum
FileItem/Sha256sum
FileItem/SizeInBytes
FileItem/StreamList/Stream/Md5sum
FileItem/StreamList/Stream/Name
FileItem/StreamList/Stream/Sha1sum
FileItem/StreamList/Stream/Sha256sum
FileItem/StreamList/Stream/SizeInBytes
FileItem/StringList/string
FileItem/Username
FormHistoryItem/BrowserName
FormHistoryItem/BrowserVersion
FormHistoryItem/CreationDate
FormHistoryItem/EncryptedPassword
FormHistoryItem/EncryptionType
FormHistoryItem/FirstUsedDate
FormHistoryItem/FormFieldName
FormHistoryItem/FormFieldValue
FormHistoryItem/FormSubmitURL
FormHistoryItem/FormType
FormHistoryItem/Guid
FormHistoryItem/HostName
FormHistoryItem/HttpRealm
FormHistoryItem/LastUsedDate
FormHistoryItem/PasswordFieldName
FormHistoryItem/Profile
FormHistoryItem/TimesUsed
FormHistoryItem/Username
FormHistoryItem/UsernameFieldName
FormHistoryItem/UsernameFieldValue
HiveItem/Name
HiveItem/Path
HookItem/DigitalSignatureHooked/CertificateIssuer
HookItem/DigitalSignatureHooked/CertificateSubject
HookItem/DigitalSignatureHooked/Description
HookItem/DigitalSignatureHooked/SignatureExists
HookItem/DigitalSignatureHooked/SignatureVerified
HookItem/DigitalSignatureHooking/CertificateIssuer
HookItem/DigitalSignatureHooking/CertificateSubject
HookItem/DigitalSignatureHooking/Description
HookItem/DigitalSignatureHooking/SignatureExists
HookItem/DigitalSignatureHooking/SignatureVerified
HookItem/HookDescription
HookItem/HookedFunction
HookItem/HookedModule
HookItem/HookingAddress
HookItem/HookingModule
ModuleItem/ModuleAddress
ModuleItem/ModuleBase
ModuleItem/ModuleInit
ModuleItem/ModuleName
ModuleItem/ModulePath
ModuleItem/ModuleSize
Network/DNS
Network/HTTP_Referr
Network/String
Network/URI
Network/UserAgent
PortItem/CreationTime
PortItem/localIP
PortItem/localPort
PortItem/path
PortItem/pid
PortItem/process
PortItem/protocol
PortItem/remoteIP
PortItem/remotePort
PortItem/state
PrefetchItem/AccessedFileList/AccessedFile
PrefetchItem/ApplicationFileName
PrefetchItem/ApplicationFullPath
PrefetchItem/Created
PrefetchItem/FullPath
PrefetchItem/LastRun
PrefetchItem/PrefetchHash
PrefetchItem/VolumeList/VolumeItem/DevicePath
PrefetchItem/VolumeList/VolumeItem/CreationTime
PrefetchItem/VolumeList/VolumeItem/SerialNumber
PrefetchItem/ReportedSizeInBytes
PrefetchItem/SizeInBytes
PrefetchItem/TimesExecuted
ProcessItem/HandleList/Handle/AccessMask
ProcessItem/HandleList/Handle/HandleCount
ProcessItem/HandleList/Handle/Index
ProcessItem/HandleList/Handle/Name
ProcessItem/HandleList/Handle/ObjectAddress
ProcessItem/HandleList/Handle/PointerCount
ProcessItem/HandleList/Handle/Type
ProcessItem/PortList/PortItem/CreationTime
ProcessItem/PortList/PortItem/localIP
ProcessItem/PortList/PortItem/localPort
ProcessItem/PortList/PortItem/path
ProcessItem/PortList/PortItem/pid
ProcessItem/PortList/PortItem/process
ProcessItem/PortList/PortItem/protocol
ProcessItem/PortList/PortItem/remoteIP
ProcessItem/PortList/PortItem/remotePort
ProcessItem/PortList/PortItem/state
ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateIssuer
ProcessItem/SectionList/MemorySection/DigitalSignature/CertificateSubject
ProcessItem/SectionList/MemorySection/DigitalSignature/Description
ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureExists
ProcessItem/SectionList/MemorySection/DigitalSignature/SignatureVerified
ProcessItem/SectionList/MemorySection/Injected
ProcessItem/SectionList/MemorySection/Mapped
ProcessItem/SectionList/MemorySection/Md5sum
ProcessItem/SectionList/MemorySection/Name
ProcessItem/SectionList/MemorySection/PEInfo/BaseAddress
ProcessItem/SectionList/MemorySection/PEInfo/DetectedAnomalies/string
ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Name
ProcessItem/SectionList/MemorySection/PEInfo/DetectedEntryPointSignature/Type
ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateIssuer
ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/CertificateSubject
ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/Description
ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureExists
ProcessItem/SectionList/MemorySection/PEInfo/DigitalSignature/SignatureVerified
ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Depth
ProcessItem/SectionList/MemorySection/PEInfo/EpJumpCodes/Opcodes
ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportedFunctions/string
ProcessItem/SectionList/MemorySection/PEInfo/Exports/ExportsTimeStamp
ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfFunctions
ProcessItem/SectionList/MemorySection/PEInfo/Exports/NumberOfNames
ProcessItem/SectionList/MemorySection/PEInfo/ExtraneousBytes
ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/ImportedFunctions/string
ProcessItem/SectionList/MemorySection/PEInfo/ImportedModules/Module/Name
ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEComputedAPI
ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileAPI
ProcessItem/SectionList/MemorySection/PEInfo/PEChecksum/PEFileRaw
ProcessItem/SectionList/MemorySection/PEInfo/PETimeStamp
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedCharacteristics
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/DetectedSignatureKeys/string
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Entropy/CurveData/float
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Name
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/SizeInBytes
ProcessItem/SectionList/MemorySection/PEInfo/Sections/Section/Type
ProcessItem/SectionList/MemorySection/PEInfo/Subsystem
ProcessItem/SectionList/MemorySection/PEInfo/Type
ProcessItem/SectionList/MemorySection/Protection
ProcessItem/SectionList/MemorySection/RawFlags
ProcessItem/SectionList/MemorySection/RegionSize
ProcessItem/SectionList/MemorySection/RegionStart
ProcessItem/SectionList/MemorySection/Sha1sum
ProcessItem/SectionList/MemorySection/Sha256sum
ProcessItem/SecurityID
ProcessItem/SecurityType
ProcessItem/StringList/string
ProcessItem/Username
ProcessItem/arguments
ProcessItem/detectedAnomaly
ProcessItem/hidden
ProcessItem/kernelTime
ProcessItem/name
ProcessItem/parentpid
ProcessItem/path
ProcessItem/pid
ProcessItem/startTime
ProcessItem/userTime
RegistryItem/Hive
RegistryItem/KeyPath
RegistryItem/Modified
RegistryItem/NumSubKeys
RegistryItem/NumValues
RegistryItem/Path
RegistryItem/ReportedLengthInBytes
RegistryItem/Text
RegistryItem/Type
RegistryItem/Username
RegistryItem/Value
RegistryItem/ValueName
RegistryItem/detectedAnomaly
RouteEntryItem/Destination
RouteEntryItem/Gateway
RouteEntryItem/Interface
RouteEntryItem/IsIPv6
RouteEntryItem/Metric
RouteEntryItem/Netmask
RouteEntryItem/Protocol
RouteEntryItem/RouteAge
RouteEntryItem/RouteType
ServiceItem/arguments
ServiceItem/description
ServiceItem/descriptiveName
ServiceItem/mode
ServiceItem/name
ServiceItem/path
ServiceItem/pathCertificateIssuer
ServiceItem/pathCertificateSubject
ServiceItem/pathSignatureDescription
ServiceItem/pathSignatureExists
ServiceItem/pathSignatureVerified
ServiceItem/pathmd5sum
ServiceItem/pathsha1sum
ServiceItem/pathsha256sum
ServiceItem/pid
ServiceItem/serviceDLL
ServiceItem/serviceDLLCertificateIssuer
ServiceItem/serviceDLLCertificateSubject
ServiceItem/serviceDLLSignatureDescription
ServiceItem/serviceDLLSignatureExists
ServiceItem/serviceDLLSignatureVerified
ServiceItem/serviceDLLmd5sum
ServiceItem/serviceDLLsha1sum
ServiceItem/serviceDLLsha256sum
ServiceItem/startedAs
ServiceItem/status
ServiceItem/type
Snort/Snort
SystemInfoItem/MAC
SystemInfoItem/OS
SystemInfoItem/availphysical
SystemInfoItem/biosInfo/biosDate
SystemInfoItem/biosInfo/biosVersion
SystemInfoItem/buildNumber
SystemInfoItem/date
SystemInfoItem/directory
SystemInfoItem/domain
SystemInfoItem/hostname
SystemInfoItem/installDate
SystemInfoItem/machine
SystemInfoItem/networkArray/networkInfo/MAC
SystemInfoItem/networkArray/networkInfo/adapter
SystemInfoItem/networkArray/networkInfo/description
SystemInfoItem/networkArray/networkInfo/dhcpLeaseExpires
SystemInfoItem/networkArray/networkInfo/dhcpLeaseObtained
SystemInfoItem/networkArray/networkInfo/dhcpServerArray/dhcpServer
SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/ipAddress
SystemInfoItem/networkArray/networkInfo/ipArray/ipInfo/subnetMask
SystemInfoItem/networkArray/networkInfo/ipGatewayArray/ipGateway
SystemInfoItem/patchLevel
SystemInfoItem/procType
SystemInfoItem/processor
SystemInfoItem/productID
SystemInfoItem/productName
SystemInfoItem/regOrg
SystemInfoItem/regOwner
SystemInfoItem/timezoneDST
SystemInfoItem/timezoneStandard
SystemInfoItem/totalphysical
SystemInfoItem/uptime
SystemInfoItem/user
SystemRestoreItem/RestorePointName
SystemRestoreItem/RestorePointFullPath
SystemRestoreItem/RestorePointDescription
SystemRestoreItem/RestorePointType
SystemRestoreItem/Created
SystemRestoreItem/RegistryHives/String
SystemRestoreItem/ChangeLogFileName
SystemRestoreItem/ChangeLogEntrySequenceNumber
SystemRestoreItem/ChangeLogEntryType
SystemRestoreItem/ChangeLogEntryFlags
SystemRestoreItem/FileAttributes
SystemRestoreItem/OriginalFileName
SystemRestoreItem/BackupFileName
SystemRestoreItem/AclChangeUsername
SystemRestoreItem/AclChangeSecurityID
SystemRestoreItem/OriginalShortFileName
TaskItem/AccountLogonType
TaskItem/AccountName
TaskItem/AccountRunLevel
TaskItem/ActionList/Action/ActionType
TaskItem/ActionList/Action/COMClassId
TaskItem/ActionList/Action/COMData
TaskItem/ActionList/Action/DigitalSignature/CertificateIssuer
TaskItem/ActionList/Action/DigitalSignature/CertificateSubject
TaskItem/ActionList/Action/DigitalSignature/Description
TaskItem/ActionList/Action/DigitalSignature/SignatureExists
TaskItem/ActionList/Action/DigitalSignature/SignatureVerified
TaskItem/ActionList/Action/EmailAttachments
TaskItem/ActionList/Action/EmailBCC
TaskItem/ActionList/Action/EmailBody
TaskItem/ActionList/Action/EmailCC
TaskItem/ActionList/Action/EmailFrom
TaskItem/ActionList/Action/EmailReplyTo
TaskItem/ActionList/Action/EmailServer
TaskItem/ActionList/Action/EmailSubject
TaskItem/ActionList/Action/EmailTo
TaskItem/ActionList/Action/ExecArguments
TaskItem/ActionList/Action/ExecProgramMd5sum
TaskItem/ActionList/Action/ExecProgramPath
TaskItem/ActionList/Action/ExecProgramSha1sum
TaskItem/ActionList/Action/ExecProgramSha256sum
TaskItem/ActionList/Action/ExecWorkingDirectory
TaskItem/ActionList/Action/ShowMessageBody
TaskItem/ActionList/Action/ShowMessageTitle
TaskItem/ApplicationName
TaskItem/CertificateIssuer
TaskItem/CertificateSubject
TaskItem/Comment
TaskItem/CreationDate
TaskItem/Creator
TaskItem/ExitCode
TaskItem/Flag
TaskItem/MaxRunTime
TaskItem/MostRecentRunTime
TaskItem/Name
TaskItem/NextRunTime
TaskItem/Parameters
TaskItem/Priority
TaskItem/SignatureDescription
TaskItem/SignatureExists
TaskItem/SignatureVerified
TaskItem/Status
TaskItem/TriggerList/Trigger/TriggerBegin
TaskItem/TriggerList/Trigger/TriggerDelay
TaskItem/TriggerList/Trigger/TriggerEnabled
TaskItem/TriggerList/Trigger/TriggerEnd
TaskItem/TriggerList/Trigger/TriggerFrequency
TaskItem/TriggerList/Trigger/TriggerMaxRunTime
TaskItem/TriggerList/Trigger/TriggerSessionChangeType
TaskItem/TriggerList/Trigger/TriggerSubscription
TaskItem/TriggerList/Trigger/TriggerUsername
TaskItem/TriggerList/Trigger/TriggerValueQueries
TaskItem/VirtualPath
TaskItem/WorkItemData
TaskItem/WorkingDirectory
TaskItem/md5sum
TaskItem/sha1sum
TaskItem/sha256sum
UrlHistoryItem/BrowserName
UrlHistoryItem/BrowserVersion
UrlHistoryItem/FirstBookmarkDate
UrlHistoryItem/FirstVisitDate
UrlHistoryItem/Hidden
UrlHistoryItem/HostName
UrlHistoryItem/IndexedContent
UrlHistoryItem/LastVisitDate
UrlHistoryItem/LastVisitDateLocal
UrlHistoryItem/PageTitle
UrlHistoryItem/Profile
UrlHistoryItem/Thumbnail
UrlHistoryItem/Typed
UrlHistoryItem/URL
UrlHistoryItem/Username
UrlHistoryItem/VisitCount
UrlHistoryItem/VisitFrom
UrlHistoryItem/VisitType
UserItem/LastLogin
UserItem/SecurityID
UserItem/SecurityType
UserItem/Username
UserItem/description
UserItem/disabled
UserItem/fullname
UserItem/grouplist/groupname
UserItem/homedirectory
UserItem/lockedout
UserItem/passwordrequired
UserItem/scriptpath
UserItem/userpasswordage
VolumeItem/ActualAvailableAllocationUnits
VolumeItem/BytesPerSector
VolumeItem/CreationTime
VolumeItem/DevicePath
VolumeItem/DriveLetter
VolumeItem/FileSystemFlags
VolumeItem/FileSystemName
VolumeItem/IsMounted
VolumeItem/Name
VolumeItem/SectorsPerAllocationUnit
VolumeItem/SerialNumber
VolumeItem/TotalAllocationUnits
VolumeItem/Type
VolumeItem/VolumeName