{"type":"bundle","id":"bundle--de6451e2-fa62-5585-8ad3-85726b161501","objects":[{"type":"intrusion-set","id":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"APT43","aliases":["Kimsuky","Emerald Sleet","Sparkling Pisces","Springtail","Black Banshee","Archipelago","ITG16","KTA082","Thallium","Velvet Chollima","G0094","TA427","IRON TILDEN"],"first_seen":"2012-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt43"},{"source_name":"mitre-attack","external_id":"G0094","url":"https://attack.mitre.org/groups/G0094/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--8485da82-fa96-56e1-b3f3-d8b69edb7f04","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--bed09c99-47c2-59c3-be02-c87a948e4e60","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--fff0ed2f-4ab6-508c-a792-97e5b88a27c9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"System Service Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1007","url":"https://attack.mitre.org/techniques/T1007"}]},{"type":"relationship","id":"relationship--802c822b-4f24-53d0-b21b-e60ac57b0ff9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--fff0ed2f-4ab6-508c-a792-97e5b88a27c9"},{"type":"attack-pattern","id":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Query Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1012","url":"https://attack.mitre.org/techniques/T1012"}]},{"type":"relationship","id":"relationship--1f0a3f76-61c4-5fb7-9cc8-6a53fd6c45b4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--e2945e6f-9ef6-5cae-92e5-80093025f652","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--db4d6896-4f6b-5da4-b680-f07e2ddbd80e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Automated Exfiltration","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1020","url":"https://attack.mitre.org/techniques/T1020"}]},{"type":"relationship","id":"relationship--aaa5b4c3-dc7f-5647-8601-6a7780d67459","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--db4d6896-4f6b-5da4-b680-f07e2ddbd80e"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--f0a94a0d-a8eb-5bac-b337-260c6488968c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Obfuscated Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027","url":"https://attack.mitre.org/techniques/T1027"}]},{"type":"relationship","id":"relationship--41ecfd34-babe-50ba-80fa-f4d3ff151373","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f"},{"type":"attack-pattern","id":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Software Packing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.002","url":"https://attack.mitre.org/techniques/T1027/002"}]},{"type":"relationship","id":"relationship--46a9ae61-d992-54e2-8329-c1560c43f605","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d"},{"type":"attack-pattern","id":"attack-pattern--116b8c87-d813-5286-89e6-ffcf57ca2284","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Dynamic API Resolution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.007","url":"https://attack.mitre.org/techniques/T1027/007"}]},{"type":"relationship","id":"relationship--1eaa41a7-9e7b-57a9-8eef-d358137ddcf9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--116b8c87-d813-5286-89e6-ffcf57ca2284"},{"type":"attack-pattern","id":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Command Obfuscation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.010","url":"https://attack.mitre.org/techniques/T1027/010"}]},{"type":"relationship","id":"relationship--33e5eb32-752c-59a0-acd6-327b682742ea","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486"},{"type":"attack-pattern","id":"attack-pattern--99b8c048-0605-5793-9909-0e09d734c944","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Compression","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.015","url":"https://attack.mitre.org/techniques/T1027/015"}]},{"type":"relationship","id":"relationship--4986de75-f300-5289-aadb-e4126e73df57","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--99b8c048-0605-5793-9909-0e09d734c944"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--808ac5bd-0a2f-54d6-8f76-d47bd882ea2c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Masquerade Task or Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.004","url":"https://attack.mitre.org/techniques/T1036/004"}]},{"type":"relationship","id":"relationship--00c9bea5-dfb9-5422-9105-4461b8d4c0b4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--b87aba38-6f40-5ecb-b7e7-79f42529a267","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--6baefaf6-a4fc-5606-bc3f-cac26787eda1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Double File Extension","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.007","url":"https://attack.mitre.org/techniques/T1036/007"}]},{"type":"relationship","id":"relationship--32eaccb0-0227-5b12-bc47-c287e980e363","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--6baefaf6-a4fc-5606-bc3f-cac26787eda1"},{"type":"attack-pattern","id":"attack-pattern--258e3fb1-e445-5f1c-9500-46c1535597f6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Network Sniffing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1040","url":"https://attack.mitre.org/techniques/T1040"}]},{"type":"relationship","id":"relationship--078e4ce3-41aa-5060-9523-3894c3d250ce","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--258e3fb1-e445-5f1c-9500-46c1535597f6"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--25cc07ad-8a4f-5105-8c55-1a2da627d782","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--749d2d8e-ac5b-52ca-94c6-fd3ac4f2afb6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Process Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055","url":"https://attack.mitre.org/techniques/T1055"}]},{"type":"relationship","id":"relationship--59860c25-5261-5b4f-8c6f-c2510f9cdaeb","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73"},{"type":"attack-pattern","id":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Dynamic-link Library Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055.001","url":"https://attack.mitre.org/techniques/T1055/001"}]},{"type":"relationship","id":"relationship--33bdda86-042e-5d37-8074-eb13bde6f335","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80"},{"type":"attack-pattern","id":"attack-pattern--52c7e47b-be40-519e-8f4f-8e18377515ad","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Process Hollowing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055.012","url":"https://attack.mitre.org/techniques/T1055/012"}]},{"type":"relationship","id":"relationship--e01495f5-bf5a-5e91-8f25-d9c7e26f9f96","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--52c7e47b-be40-519e-8f4f-8e18377515ad"},{"type":"attack-pattern","id":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Process Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1057","url":"https://attack.mitre.org/techniques/T1057"}]},{"type":"relationship","id":"relationship--120539ef-3df1-5758-8c8e-9540fe5b33b6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--5bd5372b-ccd4-528a-b5f2-ce420d042355","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--db1f8bf6-43a0-54c5-a404-6883f70ba5ec","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--37b31c21-a24a-50ba-866c-ac17110d4b48","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Python","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.006","url":"https://attack.mitre.org/techniques/T1059/006"}]},{"type":"relationship","id":"relationship--18dd0a09-54d8-50ee-9da5-aba8c6a14ad0","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8"},{"type":"attack-pattern","id":"attack-pattern--b89d0ac8-c6b0-520b-b42a-2bde78a994dc","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"JavaScript","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.007","url":"https://attack.mitre.org/techniques/T1059/007"}]},{"type":"relationship","id":"relationship--1e8d0742-6136-5f2d-8c5a-5ae64a65f6ad","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--b89d0ac8-c6b0-520b-b42a-2bde78a994dc"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--deb26369-8503-56eb-9581-51bac098759d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--90e06d18-64f9-5b36-a99d-1badf4e71c25","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--84ed2faa-d084-59dd-b273-43db6e745de0","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"File Transfer Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.002","url":"https://attack.mitre.org/techniques/T1071/002"}]},{"type":"relationship","id":"relationship--c259d375-cb23-5162-868d-629a658aee97","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--84ed2faa-d084-59dd-b273-43db6e745de0"},{"type":"attack-pattern","id":"attack-pattern--a7d57508-2890-525b-92d9-816e5255017e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Mail Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.003","url":"https://attack.mitre.org/techniques/T1071/003"}]},{"type":"relationship","id":"relationship--9ad5c3ae-33da-5f8f-b3b0-ef05374a9281","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--a7d57508-2890-525b-92d9-816e5255017e"},{"type":"attack-pattern","id":"attack-pattern--f24fc6c6-3264-561f-bc0a-66bcf7a136d1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Local Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078.003","url":"https://attack.mitre.org/techniques/T1078/003"}]},{"type":"relationship","id":"relationship--587e83ec-7e1a-5bd3-b7ec-e5c67b9e9e12","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--f24fc6c6-3264-561f-bc0a-66bcf7a136d1"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--9ec6b193-115e-5fec-93e5-5f975a434f1d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--98660027-bed4-5a1b-ac9b-6627a99d6480","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Dead Drop Resolver","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102.001","url":"https://attack.mitre.org/techniques/T1102/001"}]},{"type":"relationship","id":"relationship--6178e6ca-a2de-5239-89fa-1f6eb174f9b5","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--98660027-bed4-5a1b-ac9b-6627a99d6480"},{"type":"attack-pattern","id":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Bidirectional Communication","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102.002","url":"https://attack.mitre.org/techniques/T1102/002"}]},{"type":"relationship","id":"relationship--205d2de0-3255-5e54-9412-9cea06066d65","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--1b324714-85e8-526e-8ac8-f466bd3d4c4f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Native API","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1106","url":"https://attack.mitre.org/techniques/T1106"}]},{"type":"relationship","id":"relationship--c2c93662-c2c4-57fd-8274-4dfb59647f3c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8"},{"type":"attack-pattern","id":"attack-pattern--d963ab27-bbcf-5733-9b3e-d42f9f7895d2","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Multi-Factor Authentication Interception","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1111","url":"https://attack.mitre.org/techniques/T1111"}]},{"type":"relationship","id":"relationship--5b166bcc-d4f4-50bf-b0e7-070eaeffacc1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--d963ab27-bbcf-5733-9b3e-d42f9f7895d2"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--b10e7687-668b-5f71-aed6-8b21f96e1143","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Screen Capture","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1113","url":"https://attack.mitre.org/techniques/T1113"}]},{"type":"relationship","id":"relationship--c21e2630-902e-5ce3-ac67-1512a1105669","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544"},{"type":"attack-pattern","id":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Remote Email Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1114.002","url":"https://attack.mitre.org/techniques/T1114/002"}]},{"type":"relationship","id":"relationship--5e6fc83c-77d9-5e83-96df-fe62b960d3a4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b"},{"type":"attack-pattern","id":"attack-pattern--e17aa47c-232f-576d-bfd6-e0e04e7369db","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Email Forwarding Rule","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1114.003","url":"https://attack.mitre.org/techniques/T1114/003"}]},{"type":"relationship","id":"relationship--2245bf29-7d92-56ae-83f4-53f1b2fdcf82","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--e17aa47c-232f-576d-bfd6-e0e04e7369db"},{"type":"attack-pattern","id":"attack-pattern--418ea7e5-19e7-573d-a868-31349e7cd91c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Clipboard Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1115","url":"https://attack.mitre.org/techniques/T1115"}]},{"type":"relationship","id":"relationship--12f37b72-ba88-5c76-a298-a7ed44200ea1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--418ea7e5-19e7-573d-a868-31349e7cd91c"},{"type":"attack-pattern","id":"attack-pattern--ea08d1dc-9cbf-5a71-b1d6-79749217bb8e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"System Time Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1124","url":"https://attack.mitre.org/techniques/T1124"}]},{"type":"relationship","id":"relationship--db3c8cde-ab4d-5625-86a4-aaf9f8f54aca","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--ea08d1dc-9cbf-5a71-b1d6-79749217bb8e"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--e3428ad5-c807-5c72-a6e5-009b9fc2ea10","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--79c2dbac-17b5-5317-8b3d-1214ff62c3be","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Browser Extensions","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1176.001","url":"https://attack.mitre.org/techniques/T1176/001"}]},{"type":"relationship","id":"relationship--f80fdec5-aae5-50ba-a6f0-5ce34480c566","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--79c2dbac-17b5-5317-8b3d-1214ff62c3be"},{"type":"attack-pattern","id":"attack-pattern--2fb04868-83a6-567d-a997-12507b469b5a","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Browser Session Hijacking","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1185","url":"https://attack.mitre.org/techniques/T1185"}]},{"type":"relationship","id":"relationship--84173822-687a-5e45-b2c3-fc874ccbb810","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--2fb04868-83a6-567d-a997-12507b469b5a"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--9be8285a-e347-53ea-8e79-bae0061fb84d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--140e2865-78fb-57cd-911e-a65cbb90b8d0","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--26c38346-3efe-5223-a9e3-a96ac945f342","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Malicious Copy and Paste","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.004","url":"https://attack.mitre.org/techniques/T1204/004"}]},{"type":"relationship","id":"relationship--0d847001-e35d-5f7f-bf13-68b54f5d7ac0","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--26c38346-3efe-5223-a9e3-a96ac945f342"},{"type":"attack-pattern","id":"attack-pattern--845b5574-8835-593b-ab56-0c8ff18ea65e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Traffic Signaling","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1205","url":"https://attack.mitre.org/techniques/T1205"}]},{"type":"relationship","id":"relationship--7866a764-a6f1-503b-ad64-2ba4b3c0a6fc","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--845b5574-8835-593b-ab56-0c8ff18ea65e"},{"type":"attack-pattern","id":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Browser Information Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1217","url":"https://attack.mitre.org/techniques/T1217"}]},{"type":"relationship","id":"relationship--1d36a89d-878b-59b9-a7bb-57982fc5a625","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a"},{"type":"attack-pattern","id":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Mshta","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.005","url":"https://attack.mitre.org/techniques/T1218/005"}]},{"type":"relationship","id":"relationship--cd1b93b7-2741-54fb-a487-0fffcb34de45","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda"},{"type":"attack-pattern","id":"attack-pattern--651509f5-52f0-5c8e-af73-dea9c8dd5f85","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Regsvr32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.010","url":"https://attack.mitre.org/techniques/T1218/010"}]},{"type":"relationship","id":"relationship--c97b189a-1c93-5c9f-8178-4c82edb134d1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--651509f5-52f0-5c8e-af73-dea9c8dd5f85"},{"type":"attack-pattern","id":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Rundll32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.011","url":"https://attack.mitre.org/techniques/T1218/011"}]},{"type":"relationship","id":"relationship--1fe50cbf-5b19-5f02-ba3d-06953fd2c6ca","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44"},{"type":"attack-pattern","id":"attack-pattern--6e63cfbd-a9d7-5aec-add4-888465258911","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Remote Desktop Software","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1219.002","url":"https://attack.mitre.org/techniques/T1219/002"}]},{"type":"relationship","id":"relationship--83a4ee76-e7d4-5bdd-9554-254d170ac9d4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--6e63cfbd-a9d7-5aec-add4-888465258911"},{"type":"attack-pattern","id":"attack-pattern--58902cf1-d2d9-5220-a3bc-e970ebd72256","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Service Stop","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1489","url":"https://attack.mitre.org/techniques/T1489"}]},{"type":"relationship","id":"relationship--9e2949a4-600c-5683-b124-932203a76e7f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--58902cf1-d2d9-5220-a3bc-e970ebd72256"},{"type":"attack-pattern","id":"attack-pattern--63d8c962-180c-5950-9517-58314638d441","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Internal Spearphishing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1534","url":"https://attack.mitre.org/techniques/T1534"}]},{"type":"relationship","id":"relationship--db9404fd-02b6-5b3a-971e-61e4982350d9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--63d8c962-180c-5950-9517-58314638d441"},{"type":"attack-pattern","id":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Windows Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.003","url":"https://attack.mitre.org/techniques/T1543/003"}]},{"type":"relationship","id":"relationship--79a6a8a1-5f87-5eb8-9147-74525c37c5ae","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--4475eefe-6a32-53df-ac96-6a6db452297a","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Pass the Hash","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1550.002","url":"https://attack.mitre.org/techniques/T1550/002"}]},{"type":"relationship","id":"relationship--f2fd91a8-352d-579c-90fd-5f6c82a7feb7","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e"},{"type":"attack-pattern","id":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Credentials In Files","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.001","url":"https://attack.mitre.org/techniques/T1552/001"}]},{"type":"relationship","id":"relationship--b38fffdf-0133-59e8-ad4a-b3fd0cb7ce36","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3"},{"type":"attack-pattern","id":"attack-pattern--2db6b72c-e76c-5fc8-ac3b-a1be30adca80","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Private Keys","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.004","url":"https://attack.mitre.org/techniques/T1552/004"}]},{"type":"relationship","id":"relationship--bfa8ada8-d01c-5471-9838-71e00ba20e3c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--2db6b72c-e76c-5fc8-ac3b-a1be30adca80"},{"type":"attack-pattern","id":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Credentials from Web Browsers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003"}]},{"type":"relationship","id":"relationship--acbb2b25-2db2-590c-9929-1ae3fc42f757","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070"},{"type":"attack-pattern","id":"attack-pattern--33f877cd-158d-5f77-a584-174096537ee7","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Adversary-in-the-Middle","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1557","url":"https://attack.mitre.org/techniques/T1557"}]},{"type":"relationship","id":"relationship--830afc71-4f56-507a-8022-fa2ce48001f1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--33f877cd-158d-5f77-a584-174096537ee7"},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--f56184d4-f474-5423-9eb8-95ebd22f2159","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--174170f7-6bf5-5f70-919e-af37fa6a7714","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Archive via Custom Method","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.003","url":"https://attack.mitre.org/techniques/T1560/003"}]},{"type":"relationship","id":"relationship--639a1c47-7187-5812-8466-4550680f4c3c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--174170f7-6bf5-5f70-919e-af37fa6a7714"},{"type":"attack-pattern","id":"attack-pattern--b61c5b2e-0cfd-5e1f-87e3-42dd58c80332","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Hidden Users","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1564.002","url":"https://attack.mitre.org/techniques/T1564/002"}]},{"type":"relationship","id":"relationship--1c266c6d-1194-5b05-9864-043af3d6b4fe","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--b61c5b2e-0cfd-5e1f-87e3-42dd58c80332"},{"type":"attack-pattern","id":"attack-pattern--5dddb85a-c488-5311-9b00-314f07a79721","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Hidden Window","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1564.003","url":"https://attack.mitre.org/techniques/T1564/003"}]},{"type":"relationship","id":"relationship--a8450b3f-d7c2-5396-8e8a-d4e26acacf6d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--5dddb85a-c488-5311-9b00-314f07a79721"},{"type":"attack-pattern","id":"attack-pattern--1d6a12a0-1112-5c41-af75-d32aec71fb0d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Ignore Process Interrupts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1564.011","url":"https://attack.mitre.org/techniques/T1564/011"}]},{"type":"relationship","id":"relationship--6d80c021-c572-5be1-8e0e-43277338c827","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--1d6a12a0-1112-5c41-af75-d32aec71fb0d"},{"type":"attack-pattern","id":"attack-pattern--183774af-4c33-54de-8d3d-aaf04646d481","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Phishing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566","url":"https://attack.mitre.org/techniques/T1566"}]},{"type":"relationship","id":"relationship--f49488a3-12ad-5ec9-b147-4bfe6ed1bd6c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--183774af-4c33-54de-8d3d-aaf04646d481"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--ad53fa83-0d7e-50de-a69e-8abaf9b137e3","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Spearphishing Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.002","url":"https://attack.mitre.org/techniques/T1566/002"}]},{"type":"relationship","id":"relationship--5df4765d-d15a-5b5d-b757-0a7d80382f41","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--15c1445e-cb57-56a1-9187-28022a7541a2","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--69420771-365d-5078-846c-cbcc0ba9f63d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Dynamic Resolution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1568","url":"https://attack.mitre.org/techniques/T1568"}]},{"type":"relationship","id":"relationship--8d5990c1-da71-57a9-b3ae-0bf96df78f6d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--69420771-365d-5078-846c-cbcc0ba9f63d"},{"type":"attack-pattern","id":"attack-pattern--0f0cc6d7-1ffa-5b47-8f22-758cc19b400b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Acquire Infrastructure","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583","url":"https://attack.mitre.org/techniques/T1583"}]},{"type":"relationship","id":"relationship--ec71a35d-86ef-5b14-92b8-60bb4437e08b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--0f0cc6d7-1ffa-5b47-8f22-758cc19b400b"},{"type":"attack-pattern","id":"attack-pattern--d3bdd5ed-0eae-55ac-bf7f-b5e20f654648","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.004","url":"https://attack.mitre.org/techniques/T1583/004"}]},{"type":"relationship","id":"relationship--5dfa26cf-1793-5183-be46-55e03631a478","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--d3bdd5ed-0eae-55ac-bf7f-b5e20f654648"},{"type":"attack-pattern","id":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Web Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.006","url":"https://attack.mitre.org/techniques/T1583/006"}]},{"type":"relationship","id":"relationship--8226bb69-7b40-55f5-8057-6727191f618d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd"},{"type":"attack-pattern","id":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Establish Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1585","url":"https://attack.mitre.org/techniques/T1585"}]},{"type":"relationship","id":"relationship--3f1c644d-f9ac-5225-a5ca-f8633e1d513b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76"},{"type":"attack-pattern","id":"attack-pattern--8280d116-0e73-550e-9fcc-8a82387581d6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Develop Capabilities","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1587","url":"https://attack.mitre.org/techniques/T1587"}]},{"type":"relationship","id":"relationship--8935614a-f3a7-56f4-93f8-09e69477c65d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--8280d116-0e73-550e-9fcc-8a82387581d6"},{"type":"attack-pattern","id":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Email Addresses","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1589.002","url":"https://attack.mitre.org/techniques/T1589/002"}]},{"type":"relationship","id":"relationship--9fe9d08f-74ad-58da-907d-e2e96b785d58","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9"},{"type":"attack-pattern","id":"attack-pattern--16e01e82-89cb-5500-a68a-e8fdf676a949","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Employee Names","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1589.003","url":"https://attack.mitre.org/techniques/T1589/003"}]},{"type":"relationship","id":"relationship--49fc6f1b-2dbd-56db-b1cd-d32ccb0c2e8d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--16e01e82-89cb-5500-a68a-e8fdf676a949"},{"type":"attack-pattern","id":"attack-pattern--bf65956a-96f7-5514-9bf2-b18865da3e15","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Gather Victim Org Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1591","url":"https://attack.mitre.org/techniques/T1591"}]},{"type":"relationship","id":"relationship--1908347c-b13a-53ec-af3a-78b52b66b120","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--bf65956a-96f7-5514-9bf2-b18865da3e15"},{"type":"attack-pattern","id":"attack-pattern--1ec9a93c-5dba-5a2a-ab5e-34fe3f52691d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Social Media","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1593.001","url":"https://attack.mitre.org/techniques/T1593/001"}]},{"type":"relationship","id":"relationship--714e5ceb-1a19-5c0f-aec5-20f41f11776c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--1ec9a93c-5dba-5a2a-ab5e-34fe3f52691d"},{"type":"attack-pattern","id":"attack-pattern--d403a61c-7938-5d1b-ac03-e6cefd030168","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Search Victim-Owned Websites","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1594","url":"https://attack.mitre.org/techniques/T1594"}]},{"type":"relationship","id":"relationship--8ef8d969-39f8-59c9-98dd-901012496ed4","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--d403a61c-7938-5d1b-ac03-e6cefd030168"},{"type":"attack-pattern","id":"attack-pattern--5d5354dd-b522-5f58-be96-23e5eb35d71c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Search Open Technical Databases","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1596","url":"https://attack.mitre.org/techniques/T1596"}]},{"type":"relationship","id":"relationship--77908539-2cdf-587b-8e6a-2e6e020d56f5","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--5d5354dd-b522-5f58-be96-23e5eb35d71c"},{"type":"attack-pattern","id":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Phishing for Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1598","url":"https://attack.mitre.org/techniques/T1598"}]},{"type":"relationship","id":"relationship--c7ede64b-3ab1-5df1-857e-e3b5c27bd728","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f"},{"type":"attack-pattern","id":"attack-pattern--91082435-6499-50af-8289-66deab3c3048","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Reflective Code Loading","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1620","url":"https://attack.mitre.org/techniques/T1620"}]},{"type":"relationship","id":"relationship--e7e9d179-62c7-5f51-bb83-840e12463daa","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--91082435-6499-50af-8289-66deab3c3048"},{"type":"attack-pattern","id":"attack-pattern--45a3f496-4ba4-5430-ab72-0d06b51d2e12","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Financial Theft","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1657","url":"https://attack.mitre.org/techniques/T1657"}]},{"type":"relationship","id":"relationship--b93391ea-67f6-5781-8c90-784ad0cfee83","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--45a3f496-4ba4-5430-ab72-0d06b51d2e12"},{"type":"attack-pattern","id":"attack-pattern--571eb5ee-433d-525b-9fc4-b23eb335561b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Delay Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1678","url":"https://attack.mitre.org/techniques/T1678"}]},{"type":"relationship","id":"relationship--c1900581-f35a-5bf2-a9ad-b470cd75b1d2","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--571eb5ee-433d-525b-9fc4-b23eb335561b"},{"type":"attack-pattern","id":"attack-pattern--6b587822-f319-5e97-a60e-749521b0fbe7","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Local Storage Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1680","url":"https://attack.mitre.org/techniques/T1680"}]},{"type":"relationship","id":"relationship--adb6fe21-2d9e-5edc-b05b-47d673dad7ef","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--6b587822-f319-5e97-a60e-749521b0fbe7"},{"type":"attack-pattern","id":"attack-pattern--27ac6d34-8688-55d9-be98-732e8325ffd7","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Query Public AI Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1682","url":"https://attack.mitre.org/techniques/T1682"}]},{"type":"relationship","id":"relationship--3e77652b-5f5d-5575-b203-4d42c1865246","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--27ac6d34-8688-55d9-be98-732e8325ffd7"},{"type":"attack-pattern","id":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Impersonation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1684.001","url":"https://attack.mitre.org/techniques/T1684/001"}]},{"type":"relationship","id":"relationship--ea4b70f4-0d9f-51a6-9b44-f4eb1ee0c363","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--2feec192-2718-5fa9-b7a1-3435bd65d047","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"attack-pattern","id":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Disable or Modify System Firewall","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1686","url":"https://attack.mitre.org/techniques/T1686"}]},{"type":"relationship","id":"relationship--8c1111fa-e810-5cd7-a724-cbf9ac154a96","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"uses","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--25761d83-cdab-5de1-9d6f-8cce504a06c5","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--80b9d704-84ae-5aee-b253-726786a511e3","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--b37ff588-ddad-588e-a800-74334450db21","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"China","country":"CN","region":"asia"},{"type":"relationship","id":"relationship--05a35e54-6459-5274-a7ad-ebd34e5f4b96","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--e1a011fb-ffb1-5468-bf93-33fe51e33072","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Egypt","country":"EG","region":"africa"},{"type":"relationship","id":"relationship--63633b64-2d2a-5e67-add2-06db89267de3","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--c0b43190-1ac6-5774-8c15-cc84babc4fea","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--f1ebe164-3d02-55f3-bbf7-6040fce19cf1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--28697960-8769-586b-b87b-b9c4e8e68b1d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Indonesia","country":"ID","region":"asia"},{"type":"relationship","id":"relationship--ca7bb30e-2d53-59f9-b87e-77ef42b073a2","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--28697960-8769-586b-b87b-b9c4e8e68b1d"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--c2830ac1-3cdd-5162-afce-b5822fa81c92","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--8694ba4c-c554-5351-b81a-d985679b15e9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--1f329665-b080-571f-8976-ad674ada012d","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--2e8a54c5-2390-5b15-8810-63d2ade12559","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Cayman Islands","country":"KY","region":"americas"},{"type":"relationship","id":"relationship--76b7b661-3015-5cc7-981d-b24a7085fa2c","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--2e8a54c5-2390-5b15-8810-63d2ade12559"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--59518598-3bdb-5fec-adde-52803ba42e96","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--88c9fb6c-f398-559f-b18e-422cbb386901","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Norway","country":"NO","region":"europe"},{"type":"relationship","id":"relationship--77d8165b-90ac-5904-99e8-13beed7bcdb9","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--88c9fb6c-f398-559f-b18e-422cbb386901"},{"type":"location","id":"location--657f368a-bd77-5f31-84cf-340236190da3","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Russia","country":"RU","region":"europe"},{"type":"relationship","id":"relationship--00fc836d-baa1-506d-8b99-b21dbc2209ce","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--657f368a-bd77-5f31-84cf-340236190da3"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--c29b2ad2-055c-5434-87fd-5b025cecf16e","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--9f915047-365b-5d02-ac33-38528c38eb92","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Singapore","country":"SG","region":"asia"},{"type":"relationship","id":"relationship--e9fac68b-bc61-52c9-ac74-16d390b7d065","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--9f915047-365b-5d02-ac33-38528c38eb92"},{"type":"location","id":"location--5335c49c-6927-5649-8a2c-06f868a6e189","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Slovakia","country":"SK","region":"europe"},{"type":"relationship","id":"relationship--e2ca69c9-75dd-5bfc-88aa-6b037551654b","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--5335c49c-6927-5649-8a2c-06f868a6e189"},{"type":"location","id":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"Thailand","country":"TH","region":"asia"},{"type":"relationship","id":"relationship--3519a165-0b33-5a2a-9d7e-8164ab6fb0c2","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--0644eee5-a282-540d-8cc0-b5983e13d6f6","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"},{"type":"location","id":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","name":"South Africa","country":"ZA","region":"africa"},{"type":"relationship","id":"relationship--fe67b4cc-9757-53f6-9f30-2742089596f1","spec_version":"2.1","created":"2026-05-20T09:50:18.111894+00:00","modified":"2026-07-28T19:52:25.04+00:00","relationship_type":"targets","source_ref":"intrusion-set--8bcaa422-ab51-5fb7-a606-e35239f23ac6","target_ref":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285"}]}