{"type":"bundle","id":"bundle--8dda53c0-a8ac-5036-a84e-1bd2d935e079","objects":[{"type":"intrusion-set","id":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Pioneer Kitten","description":"IRGC-affiliated cluster involved in espionage and access brokering.","aliases":["Fox Kitten","PARISITE","Br0k3r","RUBIDIUM","UNC757","Lemon Sandstorm"],"first_seen":"2017-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/pioneer-kitten"}],"labels":["nation-state","esp","extortion"]},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--136cd3ce-f7a4-59de-a258-91120976bcc3","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Archive via Utility","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560.001","url":"https://attack.mitre.org/techniques/T1560/001"}]},{"type":"relationship","id":"relationship--3b3df3f1-c313-5033-938a-a8bc488611bf","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--3967f9cd-acf5-5561-98b5-7387276a956f"},{"type":"attack-pattern","id":"attack-pattern--532c871e-cd45-5b9d-b5e4-c891c06bdda8","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"VNC","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.005","url":"https://attack.mitre.org/techniques/T1021/005"}]},{"type":"relationship","id":"relationship--c6eadd63-a0c7-5ea4-ac1c-32f778a821dc","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--532c871e-cd45-5b9d-b5e4-c891c06bdda8"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--2dfb9882-c558-5d2b-8ca8-19156722b362","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--d625c2e0-e5a1-56de-9cab-48142366319c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--3ebedc8b-9bd2-5406-9f65-a5324fbece58","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Password Managers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.005","url":"https://attack.mitre.org/techniques/T1555/005"}]},{"type":"relationship","id":"relationship--c93c1654-213a-5cea-ae3b-ac33f22e9bf1","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--3ebedc8b-9bd2-5406-9f65-a5324fbece58"},{"type":"attack-pattern","id":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Browser Information Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1217","url":"https://attack.mitre.org/techniques/T1217"}]},{"type":"relationship","id":"relationship--d7d91e1c-602c-57d2-9709-2d589173315d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--d72f87c7-4d2b-5115-bede-89aa2a369593","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"SMB/Windows Admin Shares","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.002","url":"https://attack.mitre.org/techniques/T1021/002"}]},{"type":"relationship","id":"relationship--6a8f8852-74ed-552d-aa90-ea716ea52646","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--612b5431-a4c9-5063-ba66-dcddfd42fb75"},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--a6c0ed2d-033c-576f-b335-f143f69faae2","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--ab309aeb-2bda-5353-92b2-934f5450719d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"SSH","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.004","url":"https://attack.mitre.org/techniques/T1021/004"}]},{"type":"relationship","id":"relationship--993fe794-0adf-5011-832f-9a12215058ff","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce"},{"type":"attack-pattern","id":"attack-pattern--08068dd3-9292-5d8e-927c-16b8177b7125","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Proxy","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1090","url":"https://attack.mitre.org/techniques/T1090"}]},{"type":"relationship","id":"relationship--3eec4959-b0f4-500c-b0ba-0749c259086f","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--08068dd3-9292-5d8e-927c-16b8177b7125"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--d6b0a06a-ee66-54c9-9b07-dd0c0cd503bf","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Brute Force","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1110","url":"https://attack.mitre.org/techniques/T1110"}]},{"type":"relationship","id":"relationship--6c80fa92-6040-5249-b068-9b80dfdfebbc","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--22bf2173-f5b5-5a43-b395-07dc4774010c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Masquerade Task or Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.004","url":"https://attack.mitre.org/techniques/T1036/004"}]},{"type":"relationship","id":"relationship--f20cd168-f5fd-5fe2-bdd5-d0ed2d340680","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70"},{"type":"attack-pattern","id":"attack-pattern--3cce4469-d3b2-5b83-8e3d-53e78f7e9c6d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Web Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102","url":"https://attack.mitre.org/techniques/T1102"}]},{"type":"relationship","id":"relationship--2a9e7b55-ce07-547f-8014-29e6a2dfd4aa","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--3cce4469-d3b2-5b83-8e3d-53e78f7e9c6d"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--18848416-7f71-5006-b018-f961b963770b","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Credentials In Files","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.001","url":"https://attack.mitre.org/techniques/T1552/001"}]},{"type":"relationship","id":"relationship--66b86000-af49-5878-b357-3c5262f6f6ba","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3"},{"type":"attack-pattern","id":"attack-pattern--1a036ab4-01db-57be-839a-1db8fba7d986","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Data from Network Shared Drive","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1039","url":"https://attack.mitre.org/techniques/T1039"}]},{"type":"relationship","id":"relationship--3609ccb6-3453-5490-b2bb-c18a37e41361","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--1a036ab4-01db-57be-839a-1db8fba7d986"},{"type":"attack-pattern","id":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Exploitation of Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1210","url":"https://attack.mitre.org/techniques/T1210"}]},{"type":"relationship","id":"relationship--921b1562-4e1c-5e44-8ac2-099b7601ef3a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--4814d756-48c3-53d6-b303-302567f4ed42","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Establish Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1585","url":"https://attack.mitre.org/techniques/T1585"}]},{"type":"relationship","id":"relationship--be8f24a9-ff0a-509e-ae93-c0a3b63e33bc","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--529e32a9-c7b9-5de6-80b2-120cba6c2c76"},{"type":"attack-pattern","id":"attack-pattern--01e78736-d9f3-5f3a-b7c8-a0c7abdd7c33","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Messaging Applications","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1213.005","url":"https://attack.mitre.org/techniques/T1213/005"}]},{"type":"relationship","id":"relationship--63f445dc-c367-588d-bd6d-95d75646c217","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--01e78736-d9f3-5f3a-b7c8-a0c7abdd7c33"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--aa426a92-c048-5930-b17b-dc08db8cacd7","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Query Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1012","url":"https://attack.mitre.org/techniques/T1012"}]},{"type":"relationship","id":"relationship--7422c9ea-bf9a-5a61-85b0-5a5c3f3608e7","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb"},{"type":"attack-pattern","id":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Network Service Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1046","url":"https://attack.mitre.org/techniques/T1046"}]},{"type":"relationship","id":"relationship--64193c07-f2bb-5f63-a235-2896847040c5","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--5fc10d0e-d4d7-5f76-9c02-68eeb6c7a696"},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--ae6425b9-20e5-527c-ab5f-40ff5483d99c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--98e14110-b7a2-51ff-aa08-af114f3c7004","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--4ecc87cb-9d2b-5107-9db0-53c66e60c2d6","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Command Obfuscation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.010","url":"https://attack.mitre.org/techniques/T1027/010"}]},{"type":"relationship","id":"relationship--be243618-ef4d-5f73-9cb5-86e09483e9a2","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"uses","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"attack-pattern--3808bff0-0f79-5ea2-998d-aa039ff41486"},{"type":"location","id":"location--1375b154-0a19-561b-b92a-50fd99cbdd99","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"United Arab Emirates","country":"AE","region":"asia"},{"type":"relationship","id":"relationship--6f581fb0-fb7d-5f56-a131-9065c05e9d30","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--1375b154-0a19-561b-b92a-50fd99cbdd99"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--1c7320be-5ca8-5884-9954-d8a3d998c62c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--37d09ea0-cd23-55d7-8ff9-9feed2ef0053","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--1bdd5b06-6a7b-5f78-85be-da8f79982d69","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Belarus","country":"BY","region":"europe"},{"type":"relationship","id":"relationship--7fbe26f5-4d0a-58c1-bcfc-28ab12882b7c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--1bdd5b06-6a7b-5f78-85be-da8f79982d69"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--6e0c46dc-9ea3-56cb-ad7b-c65ac0eda2fc","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--cefed8db-42b5-5692-8260-54adac4f1ba7","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"China","country":"CN","region":"asia"},{"type":"relationship","id":"relationship--ffe8b7a8-9651-5c43-8323-1c29880e31bc","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--6cf74cdb-05d3-5c2b-87c0-28df42a33e96"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--9112ea39-3cad-5257-9bf1-6dc5000b6683","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--2e844706-ffc3-54b5-9a26-41b09a9231d3","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--0ea1181d-3d0e-57ce-815c-1f4b3d5e81ca","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Ghana","country":"GH","region":"africa"},{"type":"relationship","id":"relationship--c90c65c4-025a-50b5-b00e-bbff2cbbf1dd","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--0ea1181d-3d0e-57ce-815c-1f4b3d5e81ca"},{"type":"location","id":"location--f0b0e35f-3b78-5c45-bb02-617dafa9b19d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Guatemala","country":"GT","region":"americas"},{"type":"relationship","id":"relationship--24929348-8612-5dac-ad7a-7433ad49ab54","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--f0b0e35f-3b78-5c45-bb02-617dafa9b19d"},{"type":"location","id":"location--28697960-8769-586b-b87b-b9c4e8e68b1d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Indonesia","country":"ID","region":"asia"},{"type":"relationship","id":"relationship--316e6ed3-d611-5cd0-853d-0f1c35e23b2a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--28697960-8769-586b-b87b-b9c4e8e68b1d"},{"type":"location","id":"location--760995dc-62de-5ef6-9bc7-faf52bf1b952","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Ireland","country":"IE","region":"europe"},{"type":"relationship","id":"relationship--f5fc2bec-cc55-534c-bc1f-ab8b4343a8b8","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--760995dc-62de-5ef6-9bc7-faf52bf1b952"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--c73147d2-fc8d-53f0-825a-34234b02b343","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--10735eaa-9279-5df9-ad38-d731e2f752ec","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--01638614-d673-58f9-9e1c-5fcfb1c0a4d3","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Macau","country":"MO","region":"asia"},{"type":"relationship","id":"relationship--b0beae20-8972-5879-a367-6755ae7d589b","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--01638614-d673-58f9-9e1c-5fcfb1c0a4d3"},{"type":"location","id":"location--a783fae4-6924-59d1-82e4-d3af3e406b30","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Maldives","country":"MV","region":"asia"},{"type":"relationship","id":"relationship--cd1fc0fe-ba9b-5b0a-a25b-4ee3f817b92d","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--a783fae4-6924-59d1-82e4-d3af3e406b30"},{"type":"location","id":"location--65f9d1ed-f890-5422-9b80-26fc28964f39","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Mexico","country":"MX","region":"americas"},{"type":"relationship","id":"relationship--dafdcbd6-faf4-5323-91f3-748e91edf7eb","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--65f9d1ed-f890-5422-9b80-26fc28964f39"},{"type":"location","id":"location--88c9fb6c-f398-559f-b18e-422cbb386901","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Norway","country":"NO","region":"europe"},{"type":"relationship","id":"relationship--f2c40e28-ca88-5d73-8eca-a9c58b5cbb41","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--88c9fb6c-f398-559f-b18e-422cbb386901"},{"type":"location","id":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Philippines","country":"PH","region":"asia"},{"type":"relationship","id":"relationship--efedd108-fd33-5d6b-ae95-1da907fa3101","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822"},{"type":"location","id":"location--3cd79224-9615-55ee-8547-35f3201b8c4c","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Qatar","country":"QA","region":"asia"},{"type":"relationship","id":"relationship--29380adf-4aab-53dc-b605-a9d4e1d708e5","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--3cd79224-9615-55ee-8547-35f3201b8c4c"},{"type":"location","id":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Saudi Arabia","country":"SA","region":"asia"},{"type":"relationship","id":"relationship--1bbd153e-a050-5f3d-add1-1d4e217c1bef","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a"},{"type":"location","id":"location--9f915047-365b-5d02-ac33-38528c38eb92","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Singapore","country":"SG","region":"asia"},{"type":"relationship","id":"relationship--cf42a0a7-6a97-5a28-b872-712ad9210a98","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--9f915047-365b-5d02-ac33-38528c38eb92"},{"type":"location","id":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"Taiwan","country":"TW","region":"asia"},{"type":"relationship","id":"relationship--2722fb3d-d765-5d47-82d1-a7d758f76034","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--b6441ffb-0865-5bb9-9d5f-f800436cb4f1"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--124c6003-eed4-5c81-a405-575772702e07","spec_version":"2.1","created":"2026-05-20T09:52:25.581148+00:00","modified":"2026-05-20T09:52:25.581148+00:00","relationship_type":"targets","source_ref":"intrusion-set--211567c9-9375-51e1-aedc-91bdacbbdc91","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}