https://docs.intelmq.org/latest/user/event/#classificationtaxonomy ... points to http://www.enisa.europa.eu/activities/cert/support/incident-management/browsable/incident-handling-process/incident-taxonomy/existing-taxonomies. But that link is dead.