Each front covers one part of the war and has a written rule for which events belong to it.
Attacks on companies and on the software and service suppliers that many organisations depend on. Included when the affected company, an official body or two independent origins report the incident as a cyber attack. An incident between the direct parties to another war on the record stays in that war's record.
Formal steps about cyber attacks: a government or prosecutor naming who it holds responsible, charges, sanctions, seizures, joint advisories and denials. Included when an official body takes the step or two independent origins report it.
Thefts from and attacks on banks, payment systems and crypto exchanges. Included when the affected organisation, an official body or two independent origins report the incident as a cyber attack or theft. An incident between the direct parties to another war on the record stays in that war's record.
Attacks on the networks, sites and services of governments and public bodies. Included when the affected body, another official body or two independent origins report the incident as a cyber attack. An incident between the direct parties to another war on the record stays in that war's record.
Attacks on the systems that run physical services: power, water, refrigeration and cold chains, transport, ports, telecoms and health care. Included when the affected organisation, an official body or two independent origins report the incident as a cyber attack. An incident between the direct parties to another war on the record stays in that war's record.