{"type":"bundle","id":"bundle--9ddbf63e-6ad2-5765-9cfd-62a33d772fd1","objects":[{"type":"intrusion-set","id":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"FIN12","aliases":["Trickbot Group","Grim Spider","Wizard Spider","Ilex Vixen","G0102","GOLD BLACKBURN"],"first_seen":"2018-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/fin12"},{"source_name":"mitre-attack","external_id":"G0102","url":"https://attack.mitre.org/groups/G0102/"}],"labels":["cybercrime","ran"]},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--e6853d83-618d-5fb3-a4cb-cc1279339e46","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--b9349ff1-6a36-583b-8516-179742e43b0a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Windows Management Instrumentation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1047","url":"https://attack.mitre.org/techniques/T1047"}]},{"type":"relationship","id":"relationship--adcf52a1-528a-59a4-aeea-650f812de53d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--c8b52937-6306-5f0a-bbcf-6656ecbadcb3","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Process Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055","url":"https://attack.mitre.org/techniques/T1055"}]},{"type":"relationship","id":"relationship--234168c7-44f5-58c7-8301-3e83052ef026","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73"},{"type":"attack-pattern","id":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Rundll32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.011","url":"https://attack.mitre.org/techniques/T1218/011"}]},{"type":"relationship","id":"relationship--96f5aded-148f-5069-a309-d4e86382c7e8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44"},{"type":"attack-pattern","id":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Spearphishing Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.002","url":"https://attack.mitre.org/techniques/T1566/002"}]},{"type":"relationship","id":"relationship--86b59319-e633-5196-a869-afbc65bbfc85","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd"},{"type":"attack-pattern","id":"attack-pattern--4a2ebb16-fd07-501b-988e-a8f0c19b6d03","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Windows Remote Management","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.006","url":"https://attack.mitre.org/techniques/T1021/006"}]},{"type":"relationship","id":"relationship--3948e16b-5679-5a2f-a39e-b4277e51e970","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--4a2ebb16-fd07-501b-988e-a8f0c19b6d03"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--494ff4e9-7954-5c93-9f2e-d0eb18715960","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--58902cf1-d2d9-5220-a3bc-e970ebd72256","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Service Stop","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1489","url":"https://attack.mitre.org/techniques/T1489"}]},{"type":"relationship","id":"relationship--7e0557e8-caf1-5aa1-b5e2-ccb23288fb3a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--58902cf1-d2d9-5220-a3bc-e970ebd72256"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--8ef3b91c-f3fb-5e15-b785-2ca51cf25928","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"SMB/Windows Admin Shares","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.002","url":"https://attack.mitre.org/techniques/T1021/002"}]},{"type":"relationship","id":"relationship--0dcc96a6-bda5-51e7-b283-1255810d9cf0","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75"},{"type":"attack-pattern","id":"attack-pattern--a1a3681f-e145-5d06-9916-5558993eed42","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Name Resolution Poisoning and SMB Relay","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1557.001","url":"https://attack.mitre.org/techniques/T1557/001"}]},{"type":"relationship","id":"relationship--edc72033-36e9-5acd-ac1c-c47efbcc53f8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--a1a3681f-e145-5d06-9916-5558993eed42"},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--41711b44-12b5-5fa8-bd03-d4ea1db08304","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--e2f0e673-a3df-5e37-8903-0f86393d9bd3","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Winlogon Helper DLL","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.004","url":"https://attack.mitre.org/techniques/T1547/004"}]},{"type":"relationship","id":"relationship--7427dfa5-57de-51ff-b624-3c48248f7c38","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--e2f0e673-a3df-5e37-8903-0f86393d9bd3"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--fff3a597-fa81-5ac0-8834-d27e1dc1d18e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Network Share Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1135","url":"https://attack.mitre.org/techniques/T1135"}]},{"type":"relationship","id":"relationship--36d2a5ef-c5e4-5e4a-a9d6-cfafff6a3cd3","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375"},{"type":"attack-pattern","id":"attack-pattern--a64cc4d0-f1be-531c-9870-6a5e975ace51","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021","url":"https://attack.mitre.org/techniques/T1021"}]},{"type":"relationship","id":"relationship--d4fb8c6e-665c-5e9d-aaec-d191d96d465e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--a64cc4d0-f1be-531c-9870-6a5e975ace51"},{"type":"attack-pattern","id":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Security Account Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.002","url":"https://attack.mitre.org/techniques/T1003/002"}]},{"type":"relationship","id":"relationship--fbcdf3c8-37a0-5d91-976d-c682a22eec9f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0"},{"type":"attack-pattern","id":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Windows Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.003","url":"https://attack.mitre.org/techniques/T1543/003"}]},{"type":"relationship","id":"relationship--2ad0ccdf-d8a0-5e64-8e27-19abd7001489","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--496049b1-18d2-5b2b-bddd-53b1ff9da377","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--239e9068-afa3-516e-93a3-4fcc40f2cedd","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--77710a58-55c7-5f92-8d95-b41917cff15b","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--a184b572-e2fb-5214-87a2-69848edd3a9a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Domain Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078.002","url":"https://attack.mitre.org/techniques/T1078/002"}]},{"type":"relationship","id":"relationship--1e956862-b1c8-527d-ae6e-6a4897773442","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--a184b572-e2fb-5214-87a2-69848edd3a9a"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--71bec9ca-2cee-5336-b1e9-07be514b1961","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--ce35375e-14b5-5c47-9953-f3a97b47893b","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Lateral Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1570","url":"https://attack.mitre.org/techniques/T1570"}]},{"type":"relationship","id":"relationship--a0df8815-d121-5aed-a9e8-cfe96a677db6","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--41a703a2-96b9-5caa-8498-1515f24a9807"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--57a08a5d-fa8f-5dce-aac0-6fef2b001ff2","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Masquerade Task or Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.004","url":"https://attack.mitre.org/techniques/T1036/004"}]},{"type":"relationship","id":"relationship--794c934c-980b-5755-9e1b-258b8aef1938","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--3c7fecce-02fa-5567-bbd0-0cf43e7cfe99","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--5d42ba3f-98e1-5ffa-a5b0-a7728217273e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Windows Credential Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.004","url":"https://attack.mitre.org/techniques/T1555/004"}]},{"type":"relationship","id":"relationship--8a8ed447-1bda-55f9-90e4-af9f30258d1d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--5d42ba3f-98e1-5ffa-a5b0-a7728217273e"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--fffcbe92-5798-5a4f-a701-4ef7a6b01a88","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Dynamic-link Library Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055.001","url":"https://attack.mitre.org/techniques/T1055/001"}]},{"type":"relationship","id":"relationship--3b315bfe-ecc3-59e8-aad4-fc3061b47de9","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--b097873f-481b-5882-9241-8fcd529dcc80"},{"type":"attack-pattern","id":"attack-pattern--6fa91325-92a9-50b9-9109-8eb19d6442a9","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Group Policy Preferences","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.006","url":"https://attack.mitre.org/techniques/T1552/006"}]},{"type":"relationship","id":"relationship--81d5babe-5f27-5c14-a0c1-e66259444944","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--6fa91325-92a9-50b9-9109-8eb19d6442a9"},{"type":"attack-pattern","id":"attack-pattern--3131bfb2-9d10-5fff-8de0-31bccba3d19d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"BITS Jobs","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1197","url":"https://attack.mitre.org/techniques/T1197"}]},{"type":"relationship","id":"relationship--d14f51ea-8f2d-5563-9027-4ea64f1719bd","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--3131bfb2-9d10-5fff-8de0-31bccba3d19d"},{"type":"attack-pattern","id":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Pass the Hash","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1550.002","url":"https://attack.mitre.org/techniques/T1550/002"}]},{"type":"relationship","id":"relationship--98f5fc3f-0b7c-59f2-b8ec-dd5211769226","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--aa24bca7-6cb2-5f0e-8987-3243a949a55e"},{"type":"attack-pattern","id":"attack-pattern--92c0e7ee-fdf3-57fb-8e0e-ff6257fb8b43","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Exfiltration Over Unencrypted Non-C2 Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1048.003","url":"https://attack.mitre.org/techniques/T1048/003"}]},{"type":"relationship","id":"relationship--daa0da56-b98c-5d03-83eb-caddcc1bfb08","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--92c0e7ee-fdf3-57fb-8e0e-ff6257fb8b43"},{"type":"attack-pattern","id":"attack-pattern--79d76dd8-a3b7-5f7a-8046-ecbe2d160324","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Data Staged","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1074","url":"https://attack.mitre.org/techniques/T1074"}]},{"type":"relationship","id":"relationship--bb44836f-7d2b-5751-8c8f-2777f83b2f3e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--79d76dd8-a3b7-5f7a-8046-ecbe2d160324"},{"type":"attack-pattern","id":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Exploitation of Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1210","url":"https://attack.mitre.org/techniques/T1210"}]},{"type":"relationship","id":"relationship--59a38961-f362-5c4b-8d68-73e343915520","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--130d21be-4f49-5fc5-810d-6550401e3993","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--21599660-3706-5431-ad46-652a2a388bab","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--abf11adf-ff0c-5aae-9d61-c8cb80db87f9","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--e7b5a64e-41fe-516f-8b8f-ca99e5e5fe16","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--07e31da1-973b-5c60-b0d1-a6b19d99f928","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--66246f98-fcec-5575-84f9-dce843c270c1","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--015390a2-cdd2-51a6-ab40-cc4549b0c117","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Inhibit System Recovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1490","url":"https://attack.mitre.org/techniques/T1490"}]},{"type":"relationship","id":"relationship--400d315e-3b49-5470-906c-53fb7fd84a0a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--015390a2-cdd2-51a6-ab40-cc4549b0c117"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--7d559d44-4f24-5ce9-8ed2-50b43da7404d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Command Obfuscation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.010","url":"https://attack.mitre.org/techniques/T1027/010"}]},{"type":"relationship","id":"relationship--80a7ad45-3c07-57fb-a167-4d7c2b5383a2","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486"},{"type":"attack-pattern","id":"attack-pattern--a9145f76-158d-5d43-bab3-230f71d937ae","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Kerberoasting","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1558.003","url":"https://attack.mitre.org/techniques/T1558/003"}]},{"type":"relationship","id":"relationship--b317bde1-531c-5a42-95bc-3f9b223057a2","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"uses","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"attack-pattern--a9145f76-158d-5d43-bab3-230f71d937ae"},{"type":"location","id":"location--c3b339e1-0c64-5686-aade-0841bebd1798","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Argentina","country":"AR","region":"americas"},{"type":"relationship","id":"relationship--7ee4c023-6676-5a3a-9022-7a85d2862e23","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--c3b339e1-0c64-5686-aade-0841bebd1798"},{"type":"location","id":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Austria","country":"AT","region":"europe"},{"type":"relationship","id":"relationship--f3577f7b-2859-5fd7-be8c-a22a6275e4ae","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25"},{"type":"location","id":"location--a162b21a-e4f9-56d7-9d2c-b77b4154e783","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Bangladesh","country":"BD","region":"asia"},{"type":"relationship","id":"relationship--ba723ea4-8d32-5926-aa07-bc277759e5e8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--a162b21a-e4f9-56d7-9d2c-b77b4154e783"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--c72613f6-02e8-5098-ac95-9ec841ae2688","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--ffb21433-ccae-5a41-9435-dfcbfe72275d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Brunei","country":"BN","region":"asia"},{"type":"relationship","id":"relationship--d323e30c-9497-5ab5-8742-49199d741260","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--ffb21433-ccae-5a41-9435-dfcbfe72275d"},{"type":"location","id":"location--c765e734-0df7-5ebd-9c36-9a00585c346d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Bahamas","country":"BS","region":"americas"},{"type":"relationship","id":"relationship--f40bc699-8a1e-5a59-87bd-f72872f5c6af","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--c765e734-0df7-5ebd-9c36-9a00585c346d"},{"type":"location","id":"location--7446f5d8-6188-5abc-bf87-34a1f04bed24","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Chile","country":"CL","region":"americas"},{"type":"relationship","id":"relationship--05fdca83-7648-5a72-b525-01cc5f38e10f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--7446f5d8-6188-5abc-bf87-34a1f04bed24"},{"type":"location","id":"location--d8f97962-e60f-580e-80c7-bb324614e41b","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Colombia","country":"CO","region":"americas"},{"type":"relationship","id":"relationship--62d83169-6923-5ff7-98e3-5e3609e490fe","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--d8f97962-e60f-580e-80c7-bb324614e41b"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--70d9b51f-335f-55c9-a1ac-1fabbfc9b65d","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--bb45582d-2e27-5828-aa2f-343b24630f35","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Denmark","country":"DK","region":"europe"},{"type":"relationship","id":"relationship--2ed25db8-b9c6-5eae-9085-af1cfddba29f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--bb45582d-2e27-5828-aa2f-343b24630f35"},{"type":"location","id":"location--55ec9449-2ffc-5bb4-a876-cf7722d9ed24","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Dominican Republic","country":"DO","region":"americas"},{"type":"relationship","id":"relationship--c4b53f46-3548-5e39-b8e7-13fbc9852920","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--55ec9449-2ffc-5bb4-a876-cf7722d9ed24"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--5966cab4-dda4-54d9-949a-07c3770a566a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--a191f3aa-02ce-5bec-8d29-37986004bd33","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--2f4dd96f-b114-54bd-bf86-1b90adbf7603","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Honduras","country":"HN","region":"americas"},{"type":"relationship","id":"relationship--0f04ea76-4ce3-5283-9783-bad7ec93851c","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--2f4dd96f-b114-54bd-bf86-1b90adbf7603"},{"type":"location","id":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Hungary","country":"HU","region":"europe"},{"type":"relationship","id":"relationship--3adb993b-2127-5831-8317-6aa6cdd4eb27","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--323a99b7-bbae-54d5-bcba-c6bed291cc47","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--6528399e-b142-5ebf-902f-6635a6c2f2e1","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Luxembourg","country":"LU","region":"europe"},{"type":"relationship","id":"relationship--aa372cbd-fcdb-55ca-bdb5-09439612e1fe","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a"},{"type":"location","id":"location--65f9d1ed-f890-5422-9b80-26fc28964f39","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Mexico","country":"MX","region":"americas"},{"type":"relationship","id":"relationship--b7e4f3ac-27bb-5cd0-98ba-e206ddb132c8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--65f9d1ed-f890-5422-9b80-26fc28964f39"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--d92c6d26-5da5-5b4a-836f-516f9fc2ca45","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--d67b28f5-3449-5d37-bbeb-23642cd36b77","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Pakistan","country":"PK","region":"asia"},{"type":"relationship","id":"relationship--b7fbbeaa-e6a3-5a9f-9b40-e0b7cb92e4d4","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--d67b28f5-3449-5d37-bbeb-23642cd36b77"},{"type":"location","id":"location--48c0566b-263f-5cdb-b529-4f2715353a59","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Serbia","country":"RS","region":"europe"},{"type":"relationship","id":"relationship--30984ef4-ad8a-5198-a368-6ad9a0b394a8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--48c0566b-263f-5cdb-b529-4f2715353a59"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--13c2f04a-ec7f-5114-8a66-2dffb673f8ac","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Tunisia","country":"TN","region":"africa"},{"type":"relationship","id":"relationship--e49a4099-f6fe-5a3d-98cc-5958f925b016","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8"},{"type":"location","id":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","name":"Vietnam","country":"VN","region":"asia"},{"type":"relationship","id":"relationship--24cf4a17-52bd-5dc7-a8a2-0ff8de9b9b42","spec_version":"2.1","created":"2026-05-20T09:50:22.183422+00:00","modified":"2026-07-29T08:14:18.42+00:00","relationship_type":"targets","source_ref":"intrusion-set--861e4728-9944-558a-911b-9fb49ac43c4e","target_ref":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9"}]}