{"type":"bundle","id":"bundle--3f6e0821-7b23-5d31-9d4f-026cea7b872c","objects":[{"type":"intrusion-set","id":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Ember Bear","description":"GRU cluster responsible for WhisperGate wiper attacks on Ukraine.","aliases":["Cadet Blizzard","Bleeding Bear","Saint Bear","Lorec53","UAC-0056","DEV-0586","UNC2589","G1003"],"first_seen":"2020-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/ember-bear"},{"source_name":"mitre-attack","external_id":"G1003","url":"https://attack.mitre.org/groups/G1003/"}],"labels":["nation-state","dis","esp"]},{"type":"attack-pattern","id":"attack-pattern--a809c9d8-8111-55c2-bac8-9c7a54c72e56","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"OS Credential Dumping","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003","url":"https://attack.mitre.org/techniques/T1003"}]},{"type":"relationship","id":"relationship--0ede3765-a2de-58da-9509-781968bc4991","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--a809c9d8-8111-55c2-bac8-9c7a54c72e56"},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--38c4ddf5-e30e-5f63-b017-c7414e899878","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Security Account Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.002","url":"https://attack.mitre.org/techniques/T1003/002"}]},{"type":"relationship","id":"relationship--49260da2-e546-5f7b-b1f0-fe7d634b0aa9","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0"},{"type":"attack-pattern","id":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"LSA Secrets","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.004","url":"https://attack.mitre.org/techniques/T1003/004"}]},{"type":"relationship","id":"relationship--a083e1b9-0c63-5450-b78f-421ab0f50eb4","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--a801e23d-2bf6-523c-a0ca-a1a8c18d4971","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--33e6105f-7a82-5052-9d76-679eb52219a6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--a64cc4d0-f1be-531c-9870-6a5e975ace51","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021","url":"https://attack.mitre.org/techniques/T1021"}]},{"type":"relationship","id":"relationship--14deb3cc-385e-5bef-a0ef-d234ce46ef68","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--a64cc4d0-f1be-531c-9870-6a5e975ace51"},{"type":"attack-pattern","id":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Software Packing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.002","url":"https://attack.mitre.org/techniques/T1027/002"}]},{"type":"relationship","id":"relationship--a45035d5-1221-5552-adee-41c3d715dac6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d"},{"type":"attack-pattern","id":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Masquerading","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036","url":"https://attack.mitre.org/techniques/T1036"}]},{"type":"relationship","id":"relationship--e6cb9e67-f9e6-531c-8acf-37da3f2fa9f0","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--9de74296-efd7-5fd4-973e-fb17ea79defa","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Network Service Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1046","url":"https://attack.mitre.org/techniques/T1046"}]},{"type":"relationship","id":"relationship--d1bfe0bd-7f3e-5cd1-9920-7fb058d58e93","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696"},{"type":"attack-pattern","id":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Windows Management Instrumentation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1047","url":"https://attack.mitre.org/techniques/T1047"}]},{"type":"relationship","id":"relationship--fda158cb-3f5c-56d7-823d-ba6b085f0d23","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--6d70152c-f040-55c4-93ef-057279aa3927","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--c386d856-aba4-54f1-810b-31a25b329e81","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--2ddd5990-dffc-570c-a89b-1e17449cf34d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--2a6b1a4d-a4df-5ae5-9063-c9a1ff3caba6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--b89d0ac8-c6b0-520b-b42a-2bde78a994dc","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"JavaScript","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.007","url":"https://attack.mitre.org/techniques/T1059/007"}]},{"type":"relationship","id":"relationship--3e97938c-d807-5130-8000-26d8f11989da","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--b89d0ac8-c6b0-520b-b42a-2bde78a994dc"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--1906f7e3-b263-52f4-a287-dac709636981","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--2492c2c0-56e3-5899-95e9-0b2c77e76d40","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"DNS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.004","url":"https://attack.mitre.org/techniques/T1071/004"}]},{"type":"relationship","id":"relationship--5106f626-c749-520d-b63f-45c01483ed6b","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--2492c2c0-56e3-5899-95e9-0b2c77e76d40"},{"type":"attack-pattern","id":"attack-pattern--9f7c0857-0baa-5755-b5ec-486a7e742002","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Multi-hop Proxy","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1090.003","url":"https://attack.mitre.org/techniques/T1090/003"}]},{"type":"relationship","id":"relationship--769e51df-3feb-5f5e-867b-316c4a3c5838","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--9f7c0857-0baa-5755-b5ec-486a7e742002"},{"type":"attack-pattern","id":"attack-pattern--948a3131-b9eb-5fd9-9e5b-37081e8f5a85","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Non-Application Layer Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1095","url":"https://attack.mitre.org/techniques/T1095"}]},{"type":"relationship","id":"relationship--f3f39828-8b0f-5897-9be2-1b6706c7a851","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--948a3131-b9eb-5fd9-9e5b-37081e8f5a85"},{"type":"attack-pattern","id":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Brute Force","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1110","url":"https://attack.mitre.org/techniques/T1110"}]},{"type":"relationship","id":"relationship--a844915f-c2f7-5fab-a901-2f06dc009be6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--4f88a9b3-2b43-5a33-a18c-e15da6c62a5e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Automated Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1119","url":"https://attack.mitre.org/techniques/T1119"}]},{"type":"relationship","id":"relationship--9b01a17b-d0bf-59c5-a92b-2892699f04f6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--500dbad8-d9b0-5bfb-8677-8c3eb7e44ab3"},{"type":"attack-pattern","id":"attack-pattern--319ae6fa-5af4-59f5-ba87-b8610822ef7e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Video Capture","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1125","url":"https://attack.mitre.org/techniques/T1125"}]},{"type":"relationship","id":"relationship--806be91d-4beb-5fca-bc1f-1f26ae9aaf21","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--319ae6fa-5af4-59f5-ba87-b8610822ef7e"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--23d06dd3-38fd-5a51-b59f-d5c1533805eb","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--343c0739-380d-510b-9281-106ba73f460a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Supply Chain Compromise","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1195","url":"https://attack.mitre.org/techniques/T1195"}]},{"type":"relationship","id":"relationship--93d4fb84-bd4d-5158-8282-86836d4b49dd","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--343c0739-380d-510b-9281-106ba73f460a"},{"type":"attack-pattern","id":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Exploitation for Client Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1203","url":"https://attack.mitre.org/techniques/T1203"}]},{"type":"relationship","id":"relationship--74c26e83-3d1a-53b2-8753-115020f4bb07","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--5df0770f-443e-59aa-9772-87fb1bccc2e8","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Exploitation of Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1210","url":"https://attack.mitre.org/techniques/T1210"}]},{"type":"relationship","id":"relationship--0d80bc1f-f38e-560d-b352-9cd8366321d8","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af"},{"type":"attack-pattern","id":"attack-pattern--f8579983-33fc-5dc3-ac4d-1db405113cfd","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Virtualization/Sandbox Evasion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1497","url":"https://attack.mitre.org/techniques/T1497"}]},{"type":"relationship","id":"relationship--849e0f37-651a-599a-b25a-f1ff21a4770a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--f8579983-33fc-5dc3-ac4d-1db405113cfd"},{"type":"attack-pattern","id":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Pass the Hash","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1550.002","url":"https://attack.mitre.org/techniques/T1550/002"}]},{"type":"relationship","id":"relationship--2e33321a-0748-5d8b-9aa4-791984b9fd07","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e"},{"type":"attack-pattern","id":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Credentials In Files","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.001","url":"https://attack.mitre.org/techniques/T1552/001"}]},{"type":"relationship","id":"relationship--ed9bbc8f-83e2-5fe4-be08-00a891875225","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3"},{"type":"attack-pattern","id":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Archive Collected Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560","url":"https://attack.mitre.org/techniques/T1560"}]},{"type":"relationship","id":"relationship--10e9883c-4391-53ca-a32e-620980c1a99e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80"},{"type":"attack-pattern","id":"attack-pattern--f59d7eb7-48ba-5568-a6b4-1e19ec2e8223","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Disk Structure Wipe","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1561.002","url":"https://attack.mitre.org/techniques/T1561/002"}]},{"type":"relationship","id":"relationship--1ef4ad20-386f-5bf5-8f4d-e37b1720147c","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--f59d7eb7-48ba-5568-a6b4-1e19ec2e8223"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--b422d035-1ee8-54e6-b515-6294334fe61c","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--c5221d6b-468e-5c51-9496-717d2a6b3b47","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Lateral Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1570","url":"https://attack.mitre.org/techniques/T1570"}]},{"type":"relationship","id":"relationship--468fe0bd-ef62-5469-8f2b-1fc41ec86325","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807"},{"type":"attack-pattern","id":"attack-pattern--a971326e-6221-55ba-9aa3-d558e2370978","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Non-Standard Port","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1571","url":"https://attack.mitre.org/techniques/T1571"}]},{"type":"relationship","id":"relationship--45f74c95-09e5-52d9-bc7a-4fd1b4b5e82d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--a971326e-6221-55ba-9aa3-d558e2370978"},{"type":"attack-pattern","id":"attack-pattern--0f0cc6d7-1ffa-5b47-8f22-758cc19b400b","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Acquire Infrastructure","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583","url":"https://attack.mitre.org/techniques/T1583"}]},{"type":"relationship","id":"relationship--74bd0399-9ec3-5bec-a2fc-9922b830654d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--0f0cc6d7-1ffa-5b47-8f22-758cc19b400b"},{"type":"attack-pattern","id":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Virtual Private Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.003","url":"https://attack.mitre.org/techniques/T1583/003"}]},{"type":"relationship","id":"relationship--b45aeccd-6f45-5655-8709-e5a87c59fb22","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71"},{"type":"attack-pattern","id":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Web Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.006","url":"https://attack.mitre.org/techniques/T1583/006"}]},{"type":"relationship","id":"relationship--512f7c0b-38d8-546a-9746-f9ae21c10be0","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd"},{"type":"attack-pattern","id":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Establish Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1585","url":"https://attack.mitre.org/techniques/T1585"}]},{"type":"relationship","id":"relationship--a5ec79ee-8695-51e2-ae5e-8abcb559c01f","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76"},{"type":"attack-pattern","id":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Email Addresses","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1589.002","url":"https://attack.mitre.org/techniques/T1589/002"}]},{"type":"relationship","id":"relationship--f949aeec-f42a-5e47-b5c0-b0c2a43af322","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9"},{"type":"attack-pattern","id":"attack-pattern--13f3ccee-8f92-557e-9ba8-850945b7b4f3","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Log Enumeration","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1654","url":"https://attack.mitre.org/techniques/T1654"}]},{"type":"relationship","id":"relationship--89d7ba6e-4aca-57c9-b06a-ee73bf500cb1","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--13f3ccee-8f92-557e-9ba8-850945b7b4f3"},{"type":"attack-pattern","id":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Impersonation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1684.001","url":"https://attack.mitre.org/techniques/T1684/001"}]},{"type":"relationship","id":"relationship--c415bbf1-a868-594a-ae7d-6b9ccd518e64","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--e18c5028-aab5-5a5f-b4e9-975675427737","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"uses","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"location","id":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Austria","country":"AT","region":"europe"},{"type":"relationship","id":"relationship--d3e60499-67e9-53f6-b6fb-0dd6c0da79b9","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--9ef89457-70c8-5145-9428-31f43411ba74","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--5ea1baa5-62e1-563f-91e7-81443e85a039","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--4314bf5f-9a95-52a9-abec-cfa329765fec","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--bb45582d-2e27-5828-aa2f-343b24630f35","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Denmark","country":"DK","region":"europe"},{"type":"relationship","id":"relationship--c096bdac-49a7-5484-b858-098949737567","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--bb45582d-2e27-5828-aa2f-343b24630f35"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--3cd2c28b-c221-5a22-b2b2-04c15826a184","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--20239f8b-d297-51b1-929a-26742615076f","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--17275d4d-e473-5083-876e-2dc69221f9b8","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Georgia","country":"GE","region":"asia"},{"type":"relationship","id":"relationship--0f006ce4-e55d-51da-8592-c170dc66e964","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--17275d4d-e473-5083-876e-2dc69221f9b8"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--7733f6a0-f143-54ee-8bc9-58d4767a2d2e","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--61b7a906-61ce-57da-ad39-490c0cca0f72","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Lithuania","country":"LT","region":"europe"},{"type":"relationship","id":"relationship--10f3b1a3-7d92-5f32-a90e-13b1a10bf5e2","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--61b7a906-61ce-57da-ad39-490c0cca0f72"},{"type":"location","id":"location--0cc52679-69d5-51c5-b375-66358567c08b","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Latvia","country":"LV","region":"europe"},{"type":"relationship","id":"relationship--0218c4ff-f35b-5588-877f-a578954165cb","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--0cc52679-69d5-51c5-b375-66358567c08b"},{"type":"location","id":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Malaysia","country":"MY","region":"asia"},{"type":"relationship","id":"relationship--2ba4ed80-43d9-5048-ae2f-9726aa3c351c","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d"},{"type":"location","id":"location--28af571d-efb5-5547-b4c0-f5be348ac20a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Poland","country":"PL","region":"europe"},{"type":"relationship","id":"relationship--96bda6c0-d1a0-5b29-8cbc-2759b9890853","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--28af571d-efb5-5547-b4c0-f5be348ac20a"},{"type":"location","id":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Saudi Arabia","country":"SA","region":"asia"},{"type":"relationship","id":"relationship--5172367d-db31-5cc4-99a9-947d927a0cfa","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a"},{"type":"location","id":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"Ukraine","country":"UA","region":"europe"},{"type":"relationship","id":"relationship--2183dcf8-7da2-58ff-a710-39df15bc5d20","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--09668a7d-b958-5749-a4bb-2c2a9ae534f6","spec_version":"2.1","created":"2026-05-20T09:52:20.775776+00:00","modified":"2026-07-29T07:05:54.598+00:00","relationship_type":"targets","source_ref":"intrusion-set--5e489eee-ff6b-5006-90c6-58308b4ba726","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}