{"type":"bundle","id":"bundle--3385c001-5e6e-59be-b2f7-8bc8a43e60a4","objects":[{"type":"intrusion-set","id":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"TEMP.Isotope","aliases":["BERSERK BEAR","Dragonfly 2.0","Dragonfly","Havex","ENERGETIC BEAR","Crouching Yeti","Ghost Blizzard","G0035","IRON LIBERTY"],"first_seen":"2017-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/temp-isotope"},{"source_name":"mitre-attack","external_id":"G0035","url":"https://attack.mitre.org/groups/G0035/"}],"labels":["nation-state","dis","esp"]},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--bb8ef049-e041-58fd-b365-e9b152e3b074","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Screen Capture","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1113","url":"https://attack.mitre.org/techniques/T1113"}]},{"type":"relationship","id":"relationship--7077c118-b36f-5123-b975-67da93f8099e","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--421d3da2-994d-5e32-be50-91d2fe16ce35","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"LSA Secrets","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.004","url":"https://attack.mitre.org/techniques/T1003/004"}]},{"type":"relationship","id":"relationship--286ab408-3891-5a2e-8462-11b2da9f30ca","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--e730ac3e-024f-5cae-9dc2-e3cbabd3637e"},{"type":"attack-pattern","id":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Remote Email Collection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1114.002","url":"https://attack.mitre.org/techniques/T1114/002"}]},{"type":"relationship","id":"relationship--8b052245-613a-5ac4-86bf-1af7624e054b","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--17aa8f39-b715-569f-acd8-521a0da1ac7b"},{"type":"attack-pattern","id":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Exploit Public-Facing Application","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190"}]},{"type":"relationship","id":"relationship--4c531eef-b0d2-5aab-a4d7-9608f88edb07","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--af84ab0b-3cda-55c1-bc74-37df3090ab1b"},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--e2e3ab88-eef1-513a-abfa-5ca26852aa1c","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Archive Collected Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1560","url":"https://attack.mitre.org/techniques/T1560"}]},{"type":"relationship","id":"relationship--17089fa4-ce06-55b9-9215-68b7099443eb","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--c1f4b0ff-b46f-56bd-85dc-c061fa945b80"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--4ad75b20-f7a8-55a0-824e-96326866cfdb","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--f1d07e29-955a-572a-a52a-0f71ff523fb3","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Network Share Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1135","url":"https://attack.mitre.org/techniques/T1135"}]},{"type":"relationship","id":"relationship--9c344223-0a89-5179-8cbb-f6676ca21fdd","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375"},{"type":"attack-pattern","id":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Python","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.006","url":"https://attack.mitre.org/techniques/T1059/006"}]},{"type":"relationship","id":"relationship--8a1dc98b-5d2e-5d47-a59f-62253f52fd10","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8"},{"type":"attack-pattern","id":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Security Account Manager","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.002","url":"https://attack.mitre.org/techniques/T1003/002"}]},{"type":"relationship","id":"relationship--71e2b37f-02d3-57ef-abb8-7e49d39adeba","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--12812afa-d011-50ee-ba2f-46d6a1cfbcc0"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--6f338029-7cee-55c3-b5fd-be1ecf868ff7","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--2f04e81a-96a2-5acd-ad13-ad06b2346afc","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--d7ff8bc5-0b99-562d-8bcf-225c4aa20604","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Brute Force","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1110","url":"https://attack.mitre.org/techniques/T1110"}]},{"type":"relationship","id":"relationship--b663fb2c-08e0-5a4c-a1cd-2a37b816bd45","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429"},{"type":"attack-pattern","id":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Drive-by Compromise","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1189","url":"https://attack.mitre.org/techniques/T1189"}]},{"type":"relationship","id":"relationship--9918c3ce-b189-5388-a3d0-a6d6a96ed2d5","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd"},{"type":"attack-pattern","id":"attack-pattern--b61c5b2e-0cfd-5e1f-87e3-42dd58c80332","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Hidden Users","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1564.002","url":"https://attack.mitre.org/techniques/T1564/002"}]},{"type":"relationship","id":"relationship--94150c92-6027-5ae9-a45d-ef59664e2f77","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--b61c5b2e-0cfd-5e1f-87e3-42dd58c80332"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--ef04b1e5-aea5-5adc-930d-3528836d3a98","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--f658280b-afc1-5d3e-8ab0-d3a285a31551","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--f452779d-c6cc-585e-a259-b51c5257970f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--84ed2faa-d084-59dd-b273-43db6e745de0","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"File Transfer Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.002","url":"https://attack.mitre.org/techniques/T1071/002"}]},{"type":"relationship","id":"relationship--13da64fa-76c2-5ac5-b203-e3682020f092","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--84ed2faa-d084-59dd-b273-43db6e745de0"},{"type":"attack-pattern","id":"attack-pattern--079f2444-5623-529d-9cbe-3aff5eff8a58","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Template Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1221","url":"https://attack.mitre.org/techniques/T1221"}]},{"type":"relationship","id":"relationship--0b5cee07-acb2-5044-9dca-6c4d3fd73534","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--079f2444-5623-529d-9cbe-3aff5eff8a58"},{"type":"attack-pattern","id":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Exploitation of Remote Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1210","url":"https://attack.mitre.org/techniques/T1210"}]},{"type":"relationship","id":"relationship--cfaa5841-9a32-5135-91e4-6f5e5be30f0a","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--86cda69e-2977-5ad8-8419-13a697a3e4af"},{"type":"attack-pattern","id":"attack-pattern--5a74f654-fb63-5b6a-afa4-6f04c06cfe43","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Forced Authentication","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1187","url":"https://attack.mitre.org/techniques/T1187"}]},{"type":"relationship","id":"relationship--65b8135b-4f1e-56cb-89f7-70f2861cec86","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--5a74f654-fb63-5b6a-afa4-6f04c06cfe43"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--6be5f281-3e98-5a4f-9813-fa95bde19151","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--ac0b597c-4987-54b1-b7d6-0d68f05da42d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--71223944-8294-53c8-b3d3-106d6c5aac70","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Compromise Software Supply Chain","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1195.002","url":"https://attack.mitre.org/techniques/T1195/002"}]},{"type":"relationship","id":"relationship--593dd155-9443-56dd-901b-dd9684b7e4e5","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--71223944-8294-53c8-b3d3-106d6c5aac70"},{"type":"attack-pattern","id":"attack-pattern--cf338f6c-ee5a-508d-bb69-ba1881dd5dd0","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Masquerade Account Name","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.010","url":"https://attack.mitre.org/techniques/T1036/010"}]},{"type":"relationship","id":"relationship--93299931-0aed-53af-af6b-b89a0943f452","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--cf338f6c-ee5a-508d-bb69-ba1881dd5dd0"},{"type":"attack-pattern","id":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Virtual Private Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.003","url":"https://attack.mitre.org/techniques/T1583/003"}]},{"type":"relationship","id":"relationship--6520abb1-88f9-5621-938b-7f1501da1949","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--a4402e18-d9b2-57de-90da-9c23184d2a71","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Query Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1012","url":"https://attack.mitre.org/techniques/T1012"}]},{"type":"relationship","id":"relationship--d9fa184a-24c1-5844-ba25-2886c89ec484","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb"},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--ecefa46f-a93b-5faa-af9d-211986dcd213","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--48a4b9a3-6850-50e4-a46f-83c1dec55bc8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Exploitation for Client Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1203","url":"https://attack.mitre.org/techniques/T1203"}]},{"type":"relationship","id":"relationship--8fe1aeaa-78c7-5c68-b0ec-7c8c47201a6d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--5bf681f3-d3ec-5c7e-9627-e4241d9c8ae9"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--1c8cdb01-05c5-56d9-bb13-0dd870cd3cf1","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Disable or Modify System Firewall","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1686","url":"https://attack.mitre.org/techniques/T1686"}]},{"type":"relationship","id":"relationship--a9dc524e-dd1a-5bb2-8b3b-07ef6c8e0346","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"uses","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee"},{"type":"location","id":"location--1375b154-0a19-561b-b92a-50fd99cbdd99","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"United Arab Emirates","country":"AE","region":"asia"},{"type":"relationship","id":"relationship--40de02be-6a42-586b-8392-bbe7e09259f5","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--1375b154-0a19-561b-b92a-50fd99cbdd99"},{"type":"location","id":"location--ae85030d-69cb-536c-8f14-e4336359104d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Afghanistan","country":"AF","region":"asia"},{"type":"relationship","id":"relationship--9d7e4030-6e80-5726-91ef-fece1614c684","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--ae85030d-69cb-536c-8f14-e4336359104d"},{"type":"location","id":"location--26bd43ce-64de-567e-a36d-0f23691c63dc","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Armenia","country":"AM","region":"asia"},{"type":"relationship","id":"relationship--2ff82856-c193-573a-8f16-6a642bbdb56f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--26bd43ce-64de-567e-a36d-0f23691c63dc"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--c17de71d-d7c1-5da4-9446-e776ee6d94c8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--3db98014-8434-54ef-b886-ae0fb482b920","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Bahrain","country":"BH","region":"asia"},{"type":"relationship","id":"relationship--5a045235-6e4a-5f93-a390-ab55a2682eed","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--3db98014-8434-54ef-b886-ae0fb482b920"},{"type":"location","id":"location--d8f97962-e60f-580e-80c7-bb324614e41b","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Colombia","country":"CO","region":"americas"},{"type":"relationship","id":"relationship--1e5f457a-c7db-5dfd-a2ad-bda953375c27","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--d8f97962-e60f-580e-80c7-bb324614e41b"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--047572d1-f84f-5ff9-9249-a79fd303ec1a","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--a5ccf744-a5d7-5b69-b238-bbbc140ad936","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Algeria","country":"DZ","region":"africa"},{"type":"relationship","id":"relationship--ff915928-c617-5eac-90ba-124da89be794","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--a5ccf744-a5d7-5b69-b238-bbbc140ad936"},{"type":"location","id":"location--549bcd45-a7e0-5fe7-9032-448edae150eb","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Ecuador","country":"EC","region":"americas"},{"type":"relationship","id":"relationship--51d7e424-46f3-52b7-a928-cc9aab366505","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--549bcd45-a7e0-5fe7-9032-448edae150eb"},{"type":"location","id":"location--972e7358-1465-509f-837b-fd47d292f53d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Finland","country":"FI","region":"europe"},{"type":"relationship","id":"relationship--f10d8aaa-f86d-5973-baa2-22721dc0cec8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--972e7358-1465-509f-837b-fd47d292f53d"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--5201b149-e019-5eab-9233-c49fcab851a4","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--28697960-8769-586b-b87b-b9c4e8e68b1d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Indonesia","country":"ID","region":"asia"},{"type":"relationship","id":"relationship--75cd0a4c-2bb6-54b2-9189-37bb1c2eda00","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--28697960-8769-586b-b87b-b9c4e8e68b1d"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--cc3a3279-833f-5847-8d8c-7a7e7ad18495","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--9e28a5f4-2866-5976-9e35-5b8180d7aa80","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Iraq","country":"IQ","region":"asia"},{"type":"relationship","id":"relationship--57462247-7190-58af-bb31-c6f633b907d3","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--9e28a5f4-2866-5976-9e35-5b8180d7aa80"},{"type":"location","id":"location--ad0e2a15-cb2b-5914-9739-1fecfc18450f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Iran","country":"IR","region":"asia"},{"type":"relationship","id":"relationship--6b38f239-2400-5f81-a065-1c4144a8347f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--ad0e2a15-cb2b-5914-9739-1fecfc18450f"},{"type":"location","id":"location--6191aea2-8287-579c-b33a-22258b590363","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Jordan","country":"JO","region":"asia"},{"type":"relationship","id":"relationship--b88d2e0b-da32-5a07-8faa-52a9a327799f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--6191aea2-8287-579c-b33a-22258b590363"},{"type":"location","id":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Malaysia","country":"MY","region":"asia"},{"type":"relationship","id":"relationship--9a02e9d2-ee12-502b-addd-aaa39806e233","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--1971d69b-ee92-5c40-9801-83c158985c88","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--74c4c4a2-e626-5e3e-adcf-be8b651868c4","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"New Zealand","country":"NZ","region":"oceania"},{"type":"relationship","id":"relationship--0b08a6ba-1f67-5992-b461-df3cb6b5ec70","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--74c4c4a2-e626-5e3e-adcf-be8b651868c4"},{"type":"location","id":"location--f8c79602-1ba4-5643-8a4a-86331c7f1a46","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Oman","country":"OM","region":"asia"},{"type":"relationship","id":"relationship--d1893e25-3aee-5bb8-a101-20f8a52b20fd","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--f8c79602-1ba4-5643-8a4a-86331c7f1a46"},{"type":"location","id":"location--fce8f417-6d0f-5cae-b5cd-5b244da557f9","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Paraguay","country":"PY","region":"americas"},{"type":"relationship","id":"relationship--13a16469-812b-57c1-9504-e9ce00e23fba","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--fce8f417-6d0f-5cae-b5cd-5b244da557f9"},{"type":"location","id":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Türkiye","country":"TR","region":"asia"},{"type":"relationship","id":"relationship--16660d45-7b67-5b7f-8c03-4aec4b6866d8","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe"},{"type":"location","id":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Ukraine","country":"UA","region":"europe"},{"type":"relationship","id":"relationship--a6f3f456-6956-54b2-ba50-12391570134c","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f"},{"type":"location","id":"location--c101610e-3c82-519e-8943-ba6bf39ac87e","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Uzbekistan","country":"UZ","region":"asia"},{"type":"relationship","id":"relationship--75ce24a6-23fa-5704-834a-ff8a47ac0f48","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--c101610e-3c82-519e-8943-ba6bf39ac87e"},{"type":"location","id":"location--380ebd09-66ba-5daa-9804-464ca5dd0071","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","name":"Yemen","country":"YE","region":"asia"},{"type":"relationship","id":"relationship--cfded2d2-55f3-5fb1-8996-9af41c4dddf7","spec_version":"2.1","created":"2026-05-20T09:52:11.956551+00:00","modified":"2026-07-29T07:07:01.749+00:00","relationship_type":"targets","source_ref":"intrusion-set--963ea066-40af-5542-9828-1ac53259ee69","target_ref":"location--380ebd09-66ba-5daa-9804-464ca5dd0071"}]}