Tags assigned to the payload, e.g. 'htmlsmuggling'

Threat actors associated with the payload

Software associated with the payload, be it malicious or legitimate

File types associated with the payload, for example used as part of a multi-stage infection chain

Notable techniques used within the payload, e.g. HTML smuggling

Methods by which the payload can be delivered, e.g. 'body', 'link' or 'attachment'