{"type":"bundle","id":"bundle--09b3e134-9492-59d6-a881-788302985506","objects":[{"type":"intrusion-set","id":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"APT10","aliases":["Red Apollo","menuPass","Granite Typhoon","HOGFISH","Cloud Hopper","CVNX","ATK41","ITG01","POTASSIUM","STONE PANDA","G0045","TA429","BRONZE RIVERSIDE"],"first_seen":"2009-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt10"},{"source_name":"mitre-attack","external_id":"G0045","url":"https://attack.mitre.org/groups/G0045/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--25b79f0d-9cc8-5e3e-8d70-891107c3d2b9","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Security Account Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.002","url":"https://attack.mitre.org/techniques/T1003/002"}]},{"type":"relationship","id":"relationship--835f0088-2e8f-5f26-a87d-37ce7d156a38","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0"},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--40d4867b-b19c-5d4a-946e-8018eb9f1726","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"LSA Secrets","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.004","url":"https://attack.mitre.org/techniques/T1003/004"}]},{"type":"relationship","id":"relationship--b87a2304-22a2-5345-a4c0-0991a2d2638c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--9e3bbdb9-233e-56a4-aba7-a35931c6a06a","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--c1ee3e1c-8ca5-5222-b739-dba49bb34e99","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--19f91da3-15bb-53d7-ab08-b74a225542f3","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--3d393ec2-e30b-5d9c-8dad-116c7ed4fd75","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"SSH","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.004","url":"https://attack.mitre.org/techniques/T1021/004"}]},{"type":"relationship","id":"relationship--d3705c75-2784-5697-8759-92602a0f4a76","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce"},{"type":"attack-pattern","id":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Obfuscated Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027","url":"https://attack.mitre.org/techniques/T1027"}]},{"type":"relationship","id":"relationship--15097be0-a7fe-5bd1-ae24-1b14e8fe5239","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f"},{"type":"attack-pattern","id":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Software Packing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.002","url":"https://attack.mitre.org/techniques/T1027/002"}]},{"type":"relationship","id":"relationship--6a6095a0-48a3-508e-8cae-ab94f6a88dfd","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--514b32b1-786e-559c-86d6-068198efecc3","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Masquerading","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036","url":"https://attack.mitre.org/techniques/T1036"}]},{"type":"relationship","id":"relationship--7e7f5cff-1063-522e-b559-e64b18d66484","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a"},{"type":"attack-pattern","id":"attack-pattern--28cfd681-fb93-581c-b94c-7fd82528d106","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Rename Legitimate Utilities","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.003","url":"https://attack.mitre.org/techniques/T1036/003"}]},{"type":"relationship","id":"relationship--f5e08f9b-f032-5ded-ae63-a7e88e8125f7","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--28cfd681-fb93-581c-b94c-7fd82528d106"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--4c1a9072-c165-59f0-9d41-24a5de78861b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--1a036ab4-01db-57be-839a-1db8fba7d986","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Data from Network Shared Drive","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1039","url":"https://attack.mitre.org/techniques/T1039"}]},{"type":"relationship","id":"relationship--548ba1d5-2932-59a0-9cc3-a4452b7dd3e5","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--1a036ab4-01db-57be-839a-1db8fba7d986"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--6dad8b08-2984-56d0-b26d-3b69caa5184e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Network Service Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1046","url":"https://attack.mitre.org/techniques/T1046"}]},{"type":"relationship","id":"relationship--9fef849e-e059-5230-9cf7-476e0b334316","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696"},{"type":"attack-pattern","id":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Windows Management Instrumentation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1047","url":"https://attack.mitre.org/techniques/T1047"}]},{"type":"relationship","id":"relationship--989cf352-3048-5738-b7ae-13d41d7ab061","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e"},{"type":"attack-pattern","id":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"System Network Connections Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1049","url":"https://attack.mitre.org/techniques/T1049"}]},{"type":"relationship","id":"relationship--ab374d7f-2ed1-5e03-a11b-f16888ecf5ea","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--a4bc04e2-ee71-548d-acc0-2d12ddb80a81","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--52c7e47b-be40-519e-8f4f-8e18377515ad","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Process Hollowing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055.012","url":"https://attack.mitre.org/techniques/T1055/012"}]},{"type":"relationship","id":"relationship--f3f0b8a4-428f-5cca-bf3d-2470b676154b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--52c7e47b-be40-519e-8f4f-8e18377515ad"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--905f3df9-1c36-5d90-a863-cb38c833df24","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--31690de2-ad65-54bf-9038-fb9946cc5a29","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--e5a4d1da-3863-544b-adc0-c86d1231a842","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--e5fc6df1-3c7b-598b-b0a7-9861923357f3","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--3f9b66bc-8773-561f-9add-c0b320a9146e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--41fa3a6c-0ce5-5998-a3dc-744231b046b7","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Native API","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1106","url":"https://attack.mitre.org/techniques/T1106"}]},{"type":"relationship","id":"relationship--0a75bb0e-baac-5555-b123-e83b566ca450","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8"},{"type":"attack-pattern","id":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Automated Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1119","url":"https://attack.mitre.org/techniques/T1119"}]},{"type":"relationship","id":"relationship--58f070f9-c46c-51e1-92dd-73fcccb5946b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--3003ec5e-48c0-5935-ad05-3184e838da80","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--ac791fe7-221e-5ab1-aed1-0384941b2dfd","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--f3fcca7a-d631-55d5-bcad-b6435cb281ba","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Trusted Relationship","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1199","url":"https://attack.mitre.org/techniques/T1199"}]},{"type":"relationship","id":"relationship--4c7b1e1c-dc8f-5fa5-9072-718a2dc837fd","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--f3fcca7a-d631-55d5-bcad-b6435cb281ba"},{"type":"attack-pattern","id":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Exploitation of Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1210","url":"https://attack.mitre.org/techniques/T1210"}]},{"type":"relationship","id":"relationship--278f0a72-68a0-571e-8dab-e96321e71fb6","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af"},{"type":"attack-pattern","id":"attack-pattern--151b5acf-15e9-5578-9780-6f61fb9f8b80","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"InstallUtil","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.004","url":"https://attack.mitre.org/techniques/T1218/004"}]},{"type":"relationship","id":"relationship--a2a9fff2-4747-573b-bb3b-d63d8d726f91","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--151b5acf-15e9-5578-9780-6f61fb9f8b80"},{"type":"attack-pattern","id":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Pass the Hash","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1550.002","url":"https://attack.mitre.org/techniques/T1550/002"}]},{"type":"relationship","id":"relationship--1a360faf-feba-504f-9a27-4bf22c3edf35","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e"},{"type":"attack-pattern","id":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Archive Collected Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560","url":"https://attack.mitre.org/techniques/T1560"}]},{"type":"relationship","id":"relationship--46abb26b-537e-5b0f-95fd-0f972907d864","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80"},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--c3ffad93-d864-582e-b164-49c1c77f2c01","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--a75c2e27-a44a-54c7-939a-e03752637b0b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Lateral Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1570","url":"https://attack.mitre.org/techniques/T1570"}]},{"type":"relationship","id":"relationship--7b25cbca-e5a0-583f-aa71-02f60b4ddfb8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807"},{"type":"attack-pattern","id":"attack-pattern--d3bdd5ed-0eae-55ac-bf7f-b5e20f654648","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.004","url":"https://attack.mitre.org/techniques/T1583/004"}]},{"type":"relationship","id":"relationship--8b8e6107-4566-56e8-b7aa-a347c750373b","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"uses","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"attack-pattern--d3bdd5ed-0eae-55ac-bf7f-b5e20f654648"},{"type":"location","id":"location--1375b154-0a19-561b-b92a-50fd99cbdd99","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"United Arab Emirates","country":"AE","region":"asia"},{"type":"relationship","id":"relationship--269f10c0-7365-5486-b60d-0d1783ea87f0","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--1375b154-0a19-561b-b92a-50fd99cbdd99"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--3bbb752b-5eef-5827-8e3c-e3449fabd3b5","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--038c3121-5438-5ecc-aef8-5718846a67d7","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--bbd777cd-cc44-5ed8-956f-1fee5523c27f","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--c131e76e-844b-5129-b8a7-b60393b7f313","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--4a37f672-29c7-5149-ac7b-04ab47b1b34c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--bb45582d-2e27-5828-aa2f-343b24630f35","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Denmark","country":"DK","region":"europe"},{"type":"relationship","id":"relationship--044ce5e3-a453-55e2-8716-99cd57e30a81","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--bb45582d-2e27-5828-aa2f-343b24630f35"},{"type":"location","id":"location--972e7358-1465-509f-837b-fd47d292f53d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Finland","country":"FI","region":"europe"},{"type":"relationship","id":"relationship--ae68e183-03b5-57c4-8e5c-8ba446e77eea","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--972e7358-1465-509f-837b-fd47d292f53d"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--b9dff628-a17f-512f-810b-2a80312aa1e8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--b47b2397-b19d-51f3-ad5b-a9dfbc938034","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Gabon","country":"GA","region":"africa"},{"type":"relationship","id":"relationship--e3a44a69-63b8-5ee5-bf40-5c4522920bb0","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--b47b2397-b19d-51f3-ad5b-a9dfbc938034"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--42b7ff49-db1b-5377-ab98-631be1ec0222","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--79d9474d-271e-54d9-a109-cde5d9bd01e5","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--00f13c4a-0737-5bc1-95e3-099eec48faa5","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--3ff78118-f39f-544d-a175-03cfeb376ad8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Malaysia","country":"MY","region":"asia"},{"type":"relationship","id":"relationship--febf996c-aa65-5c11-872d-28bd5bf706c8","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--62b26e5b-b56d-548c-91bb-b2b51ca163a2","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--5633535a-2fac-5d90-aff6-e247a5c2d0f1","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--0bab2ac8-2991-5bc5-9d9e-90a4f2a366eb","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"},{"type":"location","id":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","name":"South Africa","country":"ZA","region":"africa"},{"type":"relationship","id":"relationship--60dea1fd-536e-558c-8c0b-5edaecc51f8c","spec_version":"2.1","created":"2026-05-20T09:50:10.230146+00:00","modified":"2026-07-28T19:42:35.317+00:00","relationship_type":"targets","source_ref":"intrusion-set--14698840-557f-503f-acdc-de624aa49d1b","target_ref":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285"}]}