{"type":"bundle","id":"bundle--81414596-d72c-5e4f-8750-45874d276e4c","objects":[{"type":"intrusion-set","id":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"APT33","aliases":["Magnallium","HOLMIUM","Elfin","ATK35","REFINED KITTEN","Peach Sandstorm","G0064","IRON TILDEN"],"first_seen":"2013-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt33"},{"source_name":"mitre-attack","external_id":"G0064","url":"https://attack.mitre.org/groups/G0064/"}],"labels":["nation-state","esp","sup"]},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--3bd790d0-5e80-5e96-a14e-62a152e5cf01","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"LSA Secrets","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.004","url":"https://attack.mitre.org/techniques/T1003/004"}]},{"type":"relationship","id":"relationship--0e0b97ed-11b0-5252-a224-c6246b865586","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e"},{"type":"attack-pattern","id":"attack-pattern--d4d038b7-2005-5308-95a6-a4c470a4d947","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Cached Domain Credentials","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.005","url":"https://attack.mitre.org/techniques/T1003/005"}]},{"type":"relationship","id":"relationship--55a6771d-39db-5a86-956e-dd38cd247fa6","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--d4d038b7-2005-5308-95a6-a4c470a4d947"},{"type":"attack-pattern","id":"attack-pattern--258e3fb1-e445-5f1c-9500-46c1535597f6","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Network Sniffing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1040","url":"https://attack.mitre.org/techniques/T1040"}]},{"type":"relationship","id":"relationship--ccd5f203-9ab1-51d3-8f5c-cdf357070511","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--258e3fb1-e445-5f1c-9500-46c1535597f6"},{"type":"attack-pattern","id":"attack-pattern--92c0e7ee-fdf3-57fb-8e0e-ff6257fb8b43","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Exfiltration Over Unencrypted Non-C2 Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1048.003","url":"https://attack.mitre.org/techniques/T1048/003"}]},{"type":"relationship","id":"relationship--b677a4e8-90ca-538a-9776-0b6d6db23d5b","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--92c0e7ee-fdf3-57fb-8e0e-ff6257fb8b43"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--35d9bd1d-e7de-5ade-8037-ba47de646957","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--a03e063d-2370-5109-a3de-2173a399e44c","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--a68af4a4-1259-5646-a611-086e21bb93d2","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Exploitation for Privilege Escalation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Privilege Escalation"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1068","url":"https://attack.mitre.org/techniques/T1068"}]},{"type":"relationship","id":"relationship--c240ae74-da4c-5d79-853c-d2b55d73a725","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--fd7772c2-6f7d-5bf3-b7a1-8e398cedecf9","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--9426ae24-b068-541b-8f33-877c12fa528f","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Cloud Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078.004","url":"https://attack.mitre.org/techniques/T1078/004"}]},{"type":"relationship","id":"relationship--3b396040-b939-537a-9199-5b52ea14effa","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--40d79e07-db7d-5f4c-8977-7a2dd6c1e23a","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Exploitation for Client Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1203","url":"https://attack.mitre.org/techniques/T1203"}]},{"type":"relationship","id":"relationship--2123fb16-8f5c-5526-86fb-13f5fe606100","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--0ad6c3ce-61c8-5b6b-9954-ee56e4e8dc01","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--1602c1e0-d903-543e-a3b7-20f9df762cf3","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Credentials In Files","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.001","url":"https://attack.mitre.org/techniques/T1552/001"}]},{"type":"relationship","id":"relationship--308c68a7-d5f6-5b14-9774-07b2e9039a69","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3"},{"type":"attack-pattern","id":"attack-pattern--6fa91325-92a9-50b9-9109-8eb19d6442a9","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Group Policy Preferences","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.006","url":"https://attack.mitre.org/techniques/T1552/006"}]},{"type":"relationship","id":"relationship--f41197ed-41c2-5956-958c-b9147ad628c8","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--6fa91325-92a9-50b9-9109-8eb19d6442a9"},{"type":"attack-pattern","id":"attack-pattern--a1a15eb3-a4bb-557d-b092-f8d561456cc7","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Credentials from Password Stores","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555","url":"https://attack.mitre.org/techniques/T1555"}]},{"type":"relationship","id":"relationship--ae8c66ed-2d36-508c-88f0-de99c8328da7","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--a1a15eb3-a4bb-557d-b092-f8d561456cc7"},{"type":"attack-pattern","id":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Credentials from Web Browsers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003"}]},{"type":"relationship","id":"relationship--840251d5-7de8-57ff-95f2-cc62aaa8feab","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070"},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--232518f5-3db8-5a69-9baa-67b196c814f0","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--694b83ac-14f4-5ab4-8740-7a3d0221e7d2","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Spearphishing Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.002","url":"https://attack.mitre.org/techniques/T1566/002"}]},{"type":"relationship","id":"relationship--7e3fd809-92f6-5b32-8612-b7851cf2a5e4","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd"},{"type":"attack-pattern","id":"attack-pattern--a971326e-6221-55ba-9aa3-d558e2370978","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Non-Standard Port","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1571","url":"https://attack.mitre.org/techniques/T1571"}]},{"type":"relationship","id":"relationship--0216ca43-3600-503c-803e-4924a5e84a30","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"uses","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"attack-pattern--a971326e-6221-55ba-9aa3-d558e2370978"},{"type":"location","id":"location--1375b154-0a19-561b-b92a-50fd99cbdd99","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"United Arab Emirates","country":"AE","region":"asia"},{"type":"relationship","id":"relationship--8701cfb4-d91c-51c4-b0a2-706415425f84","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--1375b154-0a19-561b-b92a-50fd99cbdd99"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--6d030133-9c3b-5d97-9160-2564a314b540","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--e0447195-30e8-55f3-a339-6e7d83a16f8a","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--b20fd35f-c898-51f8-9e6d-d7ad93d73cae","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--adef9580-3ff3-57e5-96cf-42daf7ed1dd7","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--9df8e441-5e37-542a-a82a-df9419faffde","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--02f91bc5-c709-5fe4-beae-2dabbb7916d6","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"Saudi Arabia","country":"SA","region":"asia"},{"type":"relationship","id":"relationship--c7453403-b7ea-5737-a681-0c775cb3c3fc","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--ad8ffb24-8759-5cb6-92d8-5cbc63bd7916","spec_version":"2.1","created":"2026-05-20T09:50:15.542962+00:00","modified":"2026-07-28T19:43:40.701+00:00","relationship_type":"targets","source_ref":"intrusion-set--baac2b17-971e-5b76-a99e-b40ac85fab46","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}