{"type":"bundle","id":"bundle--6bc97021-b34a-5456-8aa0-5a788e1c7fce","objects":[{"type":"intrusion-set","id":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Lyceum","aliases":["Lyceum","HEXANE","SiameseKitten","Spirlin","LYCEUM TEMPEST","Storm-0133","G0136","COBALT LYCEUM"],"first_seen":"2018-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/lyceum"},{"source_name":"mitre-attack","external_id":"G0136","url":"https://attack.mitre.org/groups/G0136/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--f095e244-6141-5f04-bfe6-3b41bae9de7f","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--455e52f6-091b-599f-8d38-82525705e6c2","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--a1a15eb3-a4bb-557d-b092-f8d561456cc7","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Credentials from Password Stores","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555","url":"https://attack.mitre.org/techniques/T1555"}]},{"type":"relationship","id":"relationship--8af441ff-95ca-5b95-a6e9-19f61a9ca0ca","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--a1a15eb3-a4bb-557d-b092-f8d561456cc7"},{"type":"attack-pattern","id":"attack-pattern--d3a72a68-0e23-51d2-b55e-474dbe704534","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Application Window Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1010","url":"https://attack.mitre.org/techniques/T1010"}]},{"type":"relationship","id":"relationship--2bcb4cd9-de5f-5dba-84f8-3d54849c9208","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--d3a72a68-0e23-51d2-b55e-474dbe704534"},{"type":"attack-pattern","id":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Email Addresses","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1589.002","url":"https://attack.mitre.org/techniques/T1589/002"}]},{"type":"relationship","id":"relationship--11976fe5-27d3-5295-976f-914a33bc728a","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9"},{"type":"attack-pattern","id":"attack-pattern--27ebfc8b-8b17-5ffa-b0dd-de7c850c6293","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"DNS Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.002","url":"https://attack.mitre.org/techniques/T1583/002"}]},{"type":"relationship","id":"relationship--41ba32d3-62db-5619-98db-d09850104ea5","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--27ebfc8b-8b17-5ffa-b0dd-de7c850c6293"},{"type":"attack-pattern","id":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Credentials from Web Browsers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003"}]},{"type":"relationship","id":"relationship--cec57d64-7f84-5f75-9872-c8dad4f7e1a2","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--4c6e0362-5fc4-524e-9c78-0bbe483ad33f","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--63d8c962-180c-5950-9517-58314638d441","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Internal Spearphishing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1534","url":"https://attack.mitre.org/techniques/T1534"}]},{"type":"relationship","id":"relationship--4b8f27e7-e467-5461-95fb-3fd240a75a3e","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--63d8c962-180c-5950-9517-58314638d441"},{"type":"attack-pattern","id":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Brute Force","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1110","url":"https://attack.mitre.org/techniques/T1110"}]},{"type":"relationship","id":"relationship--65069e4d-4c6f-5c26-9b8a-ef70c6f87e9c","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--364cb138-edc3-56d3-89d5-4bf064c8367b","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--8d17f04c-9d3b-5eee-8fc3-853379edac6c","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--6bc23961-1631-5f3d-8eac-6d2d27bed39d","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Software Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1518","url":"https://attack.mitre.org/techniques/T1518"}]},{"type":"relationship","id":"relationship--a599d223-9714-5f4a-8afd-7f3c63e82c44","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--6bc23961-1631-5f3d-8eac-6d2d27bed39d"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--c0d21225-d847-5279-ae78-6ddeff094459","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--a672cbd5-04a2-5562-829b-839acbc19bd6","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--b398dd87-6aae-5e87-aea4-54f6c6c7898c","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Local Groups","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1069.001","url":"https://attack.mitre.org/techniques/T1069/001"}]},{"type":"relationship","id":"relationship--3242bd2f-c844-56d0-be42-d8a191aac60c","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--b398dd87-6aae-5e87-aea4-54f6c6c7898c"},{"type":"attack-pattern","id":"attack-pattern--52399137-d959-529c-8061-fedfc08ec60e","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Identify Roles","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1591.004","url":"https://attack.mitre.org/techniques/T1591/004"}]},{"type":"relationship","id":"relationship--6c872ab7-1aab-5f69-a942-3cfc66efe58e","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--52399137-d959-529c-8061-fedfc08ec60e"},{"type":"attack-pattern","id":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Process Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1057","url":"https://attack.mitre.org/techniques/T1057"}]},{"type":"relationship","id":"relationship--4274eb1b-b8b3-5dc8-a0e1-96aadbb19203","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4"},{"type":"attack-pattern","id":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Bidirectional Communication","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102.002","url":"https://attack.mitre.org/techniques/T1102/002"}]},{"type":"relationship","id":"relationship--ad492e33-95bd-5ce2-9935-295c840b27e1","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--bf845645-93cc-5485-a1aa-a0766fafc90a","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--dcb488a1-0d3d-57c5-87c3-cdae1d3b35a4","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"System Network Connections Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1049","url":"https://attack.mitre.org/techniques/T1049"}]},{"type":"relationship","id":"relationship--eb97288d-eca0-5695-8a15-8fc48cb8a35d","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612"},{"type":"attack-pattern","id":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Command Obfuscation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.010","url":"https://attack.mitre.org/techniques/T1027/010"}]},{"type":"relationship","id":"relationship--2c59b900-becc-50a1-8671-4d4b3b8b2e99","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"uses","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486"},{"type":"location","id":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Egypt","country":"EG","region":"africa"},{"type":"relationship","id":"relationship--32914542-bc3d-5846-b083-c8dac96c15b1","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"targets","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--53181ec1-a7ed-58e1-8ed2-955bcdf963b6","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"targets","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--956f84e8-0fa8-5cb1-88a4-3334c3634b76","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Kuwait","country":"KW","region":"asia"},{"type":"relationship","id":"relationship--42bea333-d3f9-57ba-b855-a29b0c522ce8","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"targets","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"location--956f84e8-0fa8-5cb1-88a4-3334c3634b76"},{"type":"location","id":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"Tunisia","country":"TN","region":"africa"},{"type":"relationship","id":"relationship--32b82937-b5c8-5393-b769-cc6ccb088af1","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"targets","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8"},{"type":"location","id":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","name":"South Africa","country":"ZA","region":"africa"},{"type":"relationship","id":"relationship--7d6a0364-ba99-53d6-85f0-84159cf90d36","spec_version":"2.1","created":"2026-05-20T09:52:23.584023+00:00","modified":"2026-07-28T19:55:14.402+00:00","relationship_type":"targets","source_ref":"intrusion-set--c57ff7d6-fca9-5e27-8266-4e183a2ae447","target_ref":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285"}]}