{"type":"bundle","id":"bundle--8516e3eb-3325-5d70-8353-4affc5d658ef","objects":[{"type":"intrusion-set","id":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"APT15","aliases":["Mirage","Ke3Chang","Nylon Typhoon","Lurid","Metushy","Royal APT","Playful Dragon","NICKEL","VIXEN PANDA","G0004","Red Vulture","BRONZE PALACE"],"first_seen":"2010-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt15"},{"source_name":"mitre-attack","external_id":"G0004","url":"https://attack.mitre.org/groups/G0004/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--2bdcab73-0151-507f-b82d-f7ef1604b098","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--f47d4c03-ad70-5633-b864-5a332fd8e3dc","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--2492c2c0-56e3-5899-95e9-0b2c77e76d40","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"DNS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.004","url":"https://attack.mitre.org/techniques/T1071/004"}]},{"type":"relationship","id":"relationship--ed786d85-6e33-5fae-83a6-9134bb114a14","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--2492c2c0-56e3-5899-95e9-0b2c77e76d40"},{"type":"attack-pattern","id":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"LSA Secrets","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.004","url":"https://attack.mitre.org/techniques/T1003/004"}]},{"type":"relationship","id":"relationship--9895dc33-ed20-51fb-8339-93af3c34c2ec","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e"},{"type":"attack-pattern","id":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Remote Email Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1114.002","url":"https://attack.mitre.org/techniques/T1114/002"}]},{"type":"relationship","id":"relationship--6cd37c2b-8e98-569c-8b66-15bd1da2f0e7","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--279997d8-4da9-5f45-8062-e0fd5c014062","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--a6057494-0f98-5405-896c-d13c10c3ef48","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--adedd74d-cce5-5217-a6b9-18faad9c7959","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Automated Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1119","url":"https://attack.mitre.org/techniques/T1119"}]},{"type":"relationship","id":"relationship--a6d7cc5a-c76f-53ca-995d-90240cbb4ace","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3"},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--bc763041-513b-5761-bcd3-5869c2f72715","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--b4f21b94-3a64-5c48-bfd8-baeb70829d19","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"SMB/Windows Admin Shares","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.002","url":"https://attack.mitre.org/techniques/T1021/002"}]},{"type":"relationship","id":"relationship--924c067e-8604-5fd5-ab70-3051ac36c6b5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75"},{"type":"attack-pattern","id":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Archive Collected Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560","url":"https://attack.mitre.org/techniques/T1560"}]},{"type":"relationship","id":"relationship--2f4aad14-1319-55a0-b792-23783a36b14f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--8fc2c661-8b55-5087-b2b9-1c3f651780f1","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--0db18ddf-02ab-553b-b070-505072d94441","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--b00836b5-ce35-5999-8029-a499f940b90c","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Golden Ticket","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1558.001","url":"https://attack.mitre.org/techniques/T1558/001"}]},{"type":"relationship","id":"relationship--69835db6-1e1f-5d00-b53c-ef2b4abca712","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--b00836b5-ce35-5999-8029-a499f940b90c"},{"type":"attack-pattern","id":"attack-pattern--85d825df-4452-5e3e-b072-985733591db3","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Botnet","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.005","url":"https://attack.mitre.org/techniques/T1583/005"}]},{"type":"relationship","id":"relationship--422cede9-f263-57c6-82a8-3ded47937b80","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--85d825df-4452-5e3e-b072-985733591db3"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--e818c076-48db-5c70-8e88-4f068b16d526","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Security Account Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.002","url":"https://attack.mitre.org/techniques/T1003/002"}]},{"type":"relationship","id":"relationship--672ed83e-4af2-53af-9375-8fe1d24d3f77","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0"},{"type":"attack-pattern","id":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Windows Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.003","url":"https://attack.mitre.org/techniques/T1543/003"}]},{"type":"relationship","id":"relationship--8596dcd9-e290-5725-b9a1-3524b71b101f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d"},{"type":"attack-pattern","id":"attack-pattern--fff0ed2f-4ab6-508c-a792-97e5b88a27c9","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"System Service Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1007","url":"https://attack.mitre.org/techniques/T1007"}]},{"type":"relationship","id":"relationship--2c170b25-9cc4-5b17-90f8-e497b6f00460","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--fff0ed2f-4ab6-508c-a792-97e5b88a27c9"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--17a21d8f-d00c-5e72-8fc1-d677123ca997","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--db4d6896-4f6b-5da4-b680-f07e2ddbd80e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Automated Exfiltration","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1020","url":"https://attack.mitre.org/techniques/T1020"}]},{"type":"relationship","id":"relationship--e6e5b5ac-3a71-5754-bc7d-6a4e8c613ae1","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--db4d6896-4f6b-5da4-b680-f07e2ddbd80e"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--4af11dc2-ea27-58cd-b97e-48fa8b858dc2","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--ddec7bca-1a27-5a5c-a8bf-c784196ed37e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--19b25059-65bd-56b5-997e-4e9286196787","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Right-to-Left Override","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.002","url":"https://attack.mitre.org/techniques/T1036/002"}]},{"type":"relationship","id":"relationship--e00d97c2-33e0-52e7-867d-d571dd7d74e4","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--19b25059-65bd-56b5-997e-4e9286196787"},{"type":"attack-pattern","id":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Obfuscated Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027","url":"https://attack.mitre.org/techniques/T1027"}]},{"type":"relationship","id":"relationship--7a841c8a-5686-55f1-b688-819462ae12ce","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--73385799-0e56-5524-b47b-18b16e8d68fc","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--1af25028-dfbd-54e2-9337-2699215a03cc","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Process Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1057","url":"https://attack.mitre.org/techniques/T1057"}]},{"type":"relationship","id":"relationship--3e787d55-dab9-5513-b55f-5cadbfe27f41","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4"},{"type":"attack-pattern","id":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Cloud Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078.004","url":"https://attack.mitre.org/techniques/T1078/004"}]},{"type":"relationship","id":"relationship--a7f5f277-96f2-57ab-a445-9bd594f2bba1","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff"},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--fee387eb-65be-5ae6-b9ef-aefd621eca47","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--d52a90b9-d26d-5c11-ab3a-b6d97d37244f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--043f1d84-5cbd-56b1-8f20-00a567929e37","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"System Network Connections Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1049","url":"https://attack.mitre.org/techniques/T1049"}]},{"type":"relationship","id":"relationship--9394985f-9ce9-5e98-8aee-48ac84088311","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"uses","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612"},{"type":"location","id":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Austria","country":"AT","region":"europe"},{"type":"relationship","id":"relationship--9c9a469b-f039-5df2-b8a7-8848bea30d74","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--65f7924b-0761-5a1b-87ca-0ccc9207debc","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--e18e86ed-c3a2-5e4f-bff1-2d8b90f5838c","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--ab791785-493c-5995-8987-7fc5622e55d9","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--bb5dfa8e-87f4-54b1-a705-6db0d43fa200","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--4a5069fe-25e6-586d-834e-c4723e81277a","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Czechia","country":"CZ","region":"europe"},{"type":"relationship","id":"relationship--c71efc3b-22b9-5d8b-badb-f87b8aeccff4","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--4a5069fe-25e6-586d-834e-c4723e81277a"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--d5689054-a966-513d-ad09-c110c4edf7b6","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Spain","country":"ES","region":"europe"},{"type":"relationship","id":"relationship--352f6087-e836-570f-9afd-764fcbb56be5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--e9a00dff-6462-59de-83d2-46e904637d04","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--bb06d73c-8e60-5930-b099-8f3effd01d99","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--86bd5955-9653-57b2-8cb8-016a63c57513","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--daafc850-93ce-5887-a354-f7974728d538","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--0cc52679-69d5-51c5-b375-66358567c08b","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Latvia","country":"LV","region":"europe"},{"type":"relationship","id":"relationship--f3a3fb9c-1e99-59e3-9764-68c8dd3faed3","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--0cc52679-69d5-51c5-b375-66358567c08b"},{"type":"location","id":"location--cbd755a2-6e6b-54de-bb34-12eda243cb84","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Morocco","country":"MA","region":"africa"},{"type":"relationship","id":"relationship--5b41033e-697c-5bb6-bb3c-7cce13efc48f","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--cbd755a2-6e6b-54de-bb34-12eda243cb84"},{"type":"location","id":"location--65f9d1ed-f890-5422-9b80-26fc28964f39","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Mexico","country":"MX","region":"americas"},{"type":"relationship","id":"relationship--28e81a20-cb1c-59a4-be77-aae05febcf1b","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--65f9d1ed-f890-5422-9b80-26fc28964f39"},{"type":"location","id":"location--d67b28f5-3449-5d37-bbeb-23642cd36b77","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Pakistan","country":"PK","region":"asia"},{"type":"relationship","id":"relationship--b06873f5-3ce4-50c0-9906-14a566c4e8b5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--d67b28f5-3449-5d37-bbeb-23642cd36b77"},{"type":"location","id":"location--28af571d-efb5-5547-b4c0-f5be348ac20a","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Poland","country":"PL","region":"europe"},{"type":"relationship","id":"relationship--9ae79b6e-4c03-54a6-b4a3-ceed8d0dea75","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--28af571d-efb5-5547-b4c0-f5be348ac20a"},{"type":"location","id":"location--94b84d12-7dfb-58a3-beee-9675b5717b84","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Romania","country":"RO","region":"europe"},{"type":"relationship","id":"relationship--435bb777-1524-5808-b200-e35dcd946660","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--94b84d12-7dfb-58a3-beee-9675b5717b84"},{"type":"location","id":"location--657f368a-bd77-5f31-84cf-340236190da3","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Russia","country":"RU","region":"europe"},{"type":"relationship","id":"relationship--2b3b28ea-1d58-5d30-b90e-9022076b99c8","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--657f368a-bd77-5f31-84cf-340236190da3"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--30e7fee0-953d-5501-bfe7-02b3f828b984","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--9f915047-365b-5d02-ac33-38528c38eb92","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Singapore","country":"SG","region":"asia"},{"type":"relationship","id":"relationship--09c69097-ccbb-5e05-807c-278fd941e7c5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--9f915047-365b-5d02-ac33-38528c38eb92"},{"type":"location","id":"location--65957256-06fc-5b5b-8d99-4ea15b827c30","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Slovenia","country":"SI","region":"europe"},{"type":"relationship","id":"relationship--9cd7337b-79d9-5d99-82bf-329e443ab2f5","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--65957256-06fc-5b5b-8d99-4ea15b827c30"},{"type":"location","id":"location--5335c49c-6927-5649-8a2c-06f868a6e189","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Slovakia","country":"SK","region":"europe"},{"type":"relationship","id":"relationship--5b40c6bc-04e8-5095-85e8-e8d127e17e9e","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--5335c49c-6927-5649-8a2c-06f868a6e189"},{"type":"location","id":"location--961bd060-e444-55a9-a735-8883c22ceff8","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Sierra Leone","country":"SL","region":"africa"},{"type":"relationship","id":"relationship--c3c865c8-53ea-500b-89c5-38b699c28c5a","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--961bd060-e444-55a9-a735-8883c22ceff8"},{"type":"location","id":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","name":"Taiwan","country":"TW","region":"asia"},{"type":"relationship","id":"relationship--658326b5-42e3-5bec-91d1-ad3ffa4c1b85","spec_version":"2.1","created":"2026-05-20T09:50:10.970803+00:00","modified":"2026-07-28T19:42:31.191+00:00","relationship_type":"targets","source_ref":"intrusion-set--21ed8539-50c5-5997-aca0-536d0893a958","target_ref":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1"}]}