{"type":"bundle","id":"bundle--33e2ad16-ce39-5cce-a201-936da1a1d3f6","objects":[{"type":"intrusion-set","id":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"UNC3944","description":"Native-English-speaking eCrime collective known for social-engineering helpdesks.","aliases":["Roasted 0ktapus","Octo Tempest","Scatter Swine","Muddled Libra","Star Fraud","Storm-0875","Scattered Spider"],"first_seen":"2022-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/unc3944"}],"labels":["cybercrime","extortion","ran"]},{"type":"attack-pattern","id":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"NTDS","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.003","url":"https://attack.mitre.org/techniques/T1003/003"}]},{"type":"relationship","id":"relationship--7f24f1bf-567d-561b-901f-d916636baca8","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--396444db-9966-5532-9205-61e00ecccc14"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--e76a013c-2205-5462-a48e-432960e2962d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Remote System Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1018","url":"https://attack.mitre.org/techniques/T1018"}]},{"type":"relationship","id":"relationship--83a18a94-f305-5626-971b-1cff425e586b","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--6a976a04-eded-5abb-b18d-fa7463e1f21d"},{"type":"attack-pattern","id":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Remote Desktop Protocol","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.001","url":"https://attack.mitre.org/techniques/T1021/001"}]},{"type":"relationship","id":"relationship--939d79d8-06cb-5acc-ac07-3f103292eb08","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--9f627f43-16fe-5dd9-a85a-f56013e72950"},{"type":"attack-pattern","id":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"SSH","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.004","url":"https://attack.mitre.org/techniques/T1021/004"}]},{"type":"relationship","id":"relationship--1abf4c2b-fcf0-504c-9872-f5003c3860f4","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--f9d9ed8a-3f4a-5391-ad4c-6bb5ecbc88ce"},{"type":"attack-pattern","id":"attack-pattern--58a62067-a993-51de-9517-59c767f1bec9","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Cloud Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Lateral Movement"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1021.007","url":"https://attack.mitre.org/techniques/T1021/007"}]},{"type":"relationship","id":"relationship--7772096e-bf8b-52ef-b018-3c216168d32d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--58a62067-a993-51de-9517-59c767f1bec9"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--f8149ce6-a20f-5835-aa4d-27cab645a9b1","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Command and Scripting Interpreter","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059","url":"https://attack.mitre.org/techniques/T1059"}]},{"type":"relationship","id":"relationship--a2f388c4-7e24-5481-833e-20b60c3233bc","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--298551ee-22ca-5cf7-af46-41d8035efbcf"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--97a9e55a-3d57-5c97-9813-44e3facc122c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--a3389c80-16b9-56ce-a85e-0d17ac3c11e6","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Unix Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.004","url":"https://attack.mitre.org/techniques/T1059/004"}]},{"type":"relationship","id":"relationship--caff2213-f104-5a3f-a619-e9d0f7b02a3a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--a3389c80-16b9-56ce-a85e-0d17ac3c11e6"},{"type":"attack-pattern","id":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Exploitation for Privilege Escalation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Privilege Escalation"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1068","url":"https://attack.mitre.org/techniques/T1068"}]},{"type":"relationship","id":"relationship--9bcdfcdb-d2a6-5784-bdeb-2427acf7f12a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d"},{"type":"attack-pattern","id":"attack-pattern--79d76dd8-a3b7-5f7a-8046-ecbe2d160324","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Data Staged","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1074","url":"https://attack.mitre.org/techniques/T1074"}]},{"type":"relationship","id":"relationship--ed003409-33ba-5094-b8bd-26e841769720","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--79d76dd8-a3b7-5f7a-8046-ecbe2d160324"},{"type":"attack-pattern","id":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Valid Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078","url":"https://attack.mitre.org/techniques/T1078"}]},{"type":"relationship","id":"relationship--9e6e5210-ce40-5207-bd3e-055c62b08333","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--f36f588d-b22c-54e9-80cb-493b50db1b53"},{"type":"attack-pattern","id":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Cloud Accounts","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1078.004","url":"https://attack.mitre.org/techniques/T1078/004"}]},{"type":"relationship","id":"relationship--b014ea50-4cc7-54bb-9d55-b1be9ba3dd32","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--72efb1f7-de6a-505c-92c5-6fa3be73a7ff"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--1ef04c76-bd5b-54c0-b656-3b584d0034b8","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--84a467ef-50f1-51c9-9054-bb4699800365","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Account Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1087","url":"https://attack.mitre.org/techniques/T1087"}]},{"type":"relationship","id":"relationship--28c5ec7c-97fd-5fa9-92bf-a2f5a61b8940","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--84a467ef-50f1-51c9-9054-bb4699800365"},{"type":"attack-pattern","id":"attack-pattern--08068dd3-9292-5d8e-927c-16b8177b7125","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Proxy","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1090","url":"https://attack.mitre.org/techniques/T1090"}]},{"type":"relationship","id":"relationship--9bf7d1cb-f22e-5d6f-8ffc-2b1250d63f2d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--08068dd3-9292-5d8e-927c-16b8177b7125"},{"type":"attack-pattern","id":"attack-pattern--5f432704-b439-5c2a-9f49-8ea122a46cda","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Account Manipulation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1098","url":"https://attack.mitre.org/techniques/T1098"}]},{"type":"relationship","id":"relationship--e353feb2-40ca-55ec-83ae-162d31d76d85","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--5f432704-b439-5c2a-9f49-8ea122a46cda"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--513e56a7-1090-5372-a280-31210afa89f0","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--e17aa47c-232f-576d-bfd6-e0e04e7369db","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Email Forwarding Rule","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1114.003","url":"https://attack.mitre.org/techniques/T1114/003"}]},{"type":"relationship","id":"relationship--5562bda4-83a4-5ddf-90da-8a2c3f6d34a9","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--e17aa47c-232f-576d-bfd6-e0e04e7369db"},{"type":"attack-pattern","id":"attack-pattern--7c4f76fe-b97e-54b9-b4cc-fb87356ae795","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Create Account","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1136","url":"https://attack.mitre.org/techniques/T1136"}]},{"type":"relationship","id":"relationship--f3681c17-0e62-582a-8a16-f81efb09ed7f","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--7c4f76fe-b97e-54b9-b4cc-fb87356ae795"},{"type":"attack-pattern","id":"attack-pattern--312a9eff-8dc8-5ca1-a077-9c426b1f2ad1","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"User Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204","url":"https://attack.mitre.org/techniques/T1204"}]},{"type":"relationship","id":"relationship--88114c8c-cfb6-5937-b344-c4a329da3645","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--312a9eff-8dc8-5ca1-a077-9c426b1f2ad1"},{"type":"attack-pattern","id":"attack-pattern--01e78736-d9f3-5f3a-b7c8-a0c7abdd7c33","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Messaging Applications","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1213.005","url":"https://attack.mitre.org/techniques/T1213/005"}]},{"type":"relationship","id":"relationship--91ea961e-8e85-5dee-9afa-e4d887be9bb2","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--01e78736-d9f3-5f3a-b7c8-a0c7abdd7c33"},{"type":"attack-pattern","id":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Browser Information Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1217","url":"https://attack.mitre.org/techniques/T1217"}]},{"type":"relationship","id":"relationship--01f4ae01-b12d-5e06-8bfc-c67649d10730","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a"},{"type":"attack-pattern","id":"attack-pattern--6e63cfbd-a9d7-5aec-add4-888465258911","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Remote Desktop Software","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1219.002","url":"https://attack.mitre.org/techniques/T1219/002"}]},{"type":"relationship","id":"relationship--0f345cb0-88ab-5638-9ef9-e6cd849aaa68","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--6e63cfbd-a9d7-5aec-add4-888465258911"},{"type":"attack-pattern","id":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Data Encrypted for Impact","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1486","url":"https://attack.mitre.org/techniques/T1486"}]},{"type":"relationship","id":"relationship--29c4144f-8ad8-54a7-a379-e7905973a404","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2"},{"type":"attack-pattern","id":"attack-pattern--015390a2-cdd2-51a6-ab40-cc4549b0c117","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Inhibit System Recovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1490","url":"https://attack.mitre.org/techniques/T1490"}]},{"type":"relationship","id":"relationship--4635e29e-6f2c-5ab4-8939-035fc79489a9","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--015390a2-cdd2-51a6-ab40-cc4549b0c117"},{"type":"attack-pattern","id":"attack-pattern--70f61bda-158c-567d-9f0f-e7cb1565162c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Cloud Service Dashboard","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1538","url":"https://attack.mitre.org/techniques/T1538"}]},{"type":"relationship","id":"relationship--fb33285e-1ee3-5a76-aeb4-c3972089d71d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--70f61bda-158c-567d-9f0f-e7cb1565162c"},{"type":"attack-pattern","id":"attack-pattern--75e4967b-a2fd-5f73-9efa-c3e5f3b1bad6","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Systemd Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.002","url":"https://attack.mitre.org/techniques/T1543/002"}]},{"type":"relationship","id":"relationship--59c33b7d-893b-5f41-b449-e0208ef76c4f","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--75e4967b-a2fd-5f73-9efa-c3e5f3b1bad6"},{"type":"attack-pattern","id":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Credentials In Files","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.001","url":"https://attack.mitre.org/techniques/T1552/001"}]},{"type":"relationship","id":"relationship--f2fdb779-c031-5ac6-818d-8643d4771d70","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--27a53a8e-e0c4-5263-bab8-35bf6abf58e3"},{"type":"attack-pattern","id":"attack-pattern--2db6b72c-e76c-5fc8-ac3b-a1be30adca80","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Private Keys","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1552.004","url":"https://attack.mitre.org/techniques/T1552/004"}]},{"type":"relationship","id":"relationship--dbfbde36-f854-558e-8506-d7319d272327","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--2db6b72c-e76c-5fc8-ac3b-a1be30adca80"},{"type":"attack-pattern","id":"attack-pattern--3ebedc8b-9bd2-5406-9f65-a5324fbece58","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Password Managers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.005","url":"https://attack.mitre.org/techniques/T1555/005"}]},{"type":"relationship","id":"relationship--9660b49d-cba2-53e1-898b-629aa097e5b6","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--3ebedc8b-9bd2-5406-9f65-a5324fbece58"},{"type":"attack-pattern","id":"attack-pattern--183774af-4c33-54de-8d3d-aaf04646d481","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Phishing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566","url":"https://attack.mitre.org/techniques/T1566"}]},{"type":"relationship","id":"relationship--587d1539-0548-5470-982c-b66ecdf7d162","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--183774af-4c33-54de-8d3d-aaf04646d481"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--b696fb48-ad86-5869-aee5-cbaa601af387","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--5b7f2d2f-3b95-560f-ac5b-229e1ae02877","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Create Cloud Instance","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1578.002","url":"https://attack.mitre.org/techniques/T1578/002"}]},{"type":"relationship","id":"relationship--074ca5c4-0d43-5736-b825-a82a2ed55523","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--5b7f2d2f-3b95-560f-ac5b-229e1ae02877"},{"type":"attack-pattern","id":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Phishing for Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1598","url":"https://attack.mitre.org/techniques/T1598"}]},{"type":"relationship","id":"relationship--9cf623a9-5f84-5e9c-a1f3-7e932e4ab106","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f"},{"type":"attack-pattern","id":"attack-pattern--31a1f6e6-1aff-5ad3-920e-170a66554e9d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Multi-Factor Authentication Request Generation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1621","url":"https://attack.mitre.org/techniques/T1621"}]},{"type":"relationship","id":"relationship--0e2c04cc-2565-5eea-817a-8ef9942eb896","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--31a1f6e6-1aff-5ad3-920e-170a66554e9d"},{"type":"attack-pattern","id":"attack-pattern--45a3f496-4ba4-5430-ab72-0d06b51d2e12","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Financial Theft","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1657","url":"https://attack.mitre.org/techniques/T1657"}]},{"type":"relationship","id":"relationship--2f8c2049-1ec7-5a03-a971-e0d5a8c8777d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--45a3f496-4ba4-5430-ab72-0d06b51d2e12"},{"type":"attack-pattern","id":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Impersonation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1684.001","url":"https://attack.mitre.org/techniques/T1684/001"}]},{"type":"relationship","id":"relationship--5ce5c5b6-a3a7-5f30-8ef5-8805f324940a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--0a167930-a72b-54d7-898b-a0640d283202","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"uses","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--c3371115-c2e2-55f4-ab96-05831b893b45","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--70afa240-7618-53e3-96e5-c0778c1b4cd8","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--5454a7fd-68ac-587a-bde9-1a7dd2c16223","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--2a43921d-ab16-5a9d-8f9f-e31358ef9294","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--f79e96c5-0928-579b-9ffc-4673b9819cd0","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Spain","country":"ES","region":"europe"},{"type":"relationship","id":"relationship--cea7ce5c-83c5-511a-962d-0e58850b6c4c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5"},{"type":"location","id":"location--972e7358-1465-509f-837b-fd47d292f53d","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Finland","country":"FI","region":"europe"},{"type":"relationship","id":"relationship--619db948-0347-520a-802c-f577d0aaf3d1","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--972e7358-1465-509f-837b-fd47d292f53d"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--23e4888f-48a4-55a0-84b3-218a3f6432d8","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--b665d7da-656f-5469-aaf3-d7741b986ec5","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--c8d73741-f031-52d7-8e46-c0c86b928dd2","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--d8ea9cb5-b4fb-561b-9d2b-72688558a58b","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--504bd5b2-df19-50fb-bd73-9d95a7be0ef5","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--12ee7c0b-9a22-56d9-8c59-d53bf310d712","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--b395a528-0743-5f1c-8e07-f23ed00cc7de","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Luxembourg","country":"LU","region":"europe"},{"type":"relationship","id":"relationship--fd645228-5a90-5f83-96de-06a84b2097df","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a"},{"type":"location","id":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Philippines","country":"PH","region":"asia"},{"type":"relationship","id":"relationship--80d4b551-9f53-5de4-aa08-1a1a37bfee90","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--7588a13c-1acb-50cb-80b0-1ecfe3aba822"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--fa0475ff-492a-5620-8e83-b2e95f802df4","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--9f915047-365b-5d02-ac33-38528c38eb92","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Singapore","country":"SG","region":"asia"},{"type":"relationship","id":"relationship--4a1f1542-3bf8-558a-80db-dbe55a20c386","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--9f915047-365b-5d02-ac33-38528c38eb92"},{"type":"location","id":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"Thailand","country":"TH","region":"asia"},{"type":"relationship","id":"relationship--3e88fa04-e603-5017-afed-ab3bab916508","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--e245f181-f579-5cc8-9ac2-37d2adfa6afe","spec_version":"2.1","created":"2026-05-20T09:51:09.597394+00:00","modified":"2026-05-20T09:51:09.597394+00:00","relationship_type":"targets","source_ref":"intrusion-set--b7345e57-9eb3-5d32-ba7f-2f2ff50c5f35","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}