{
  "type": "bundle",
  "id": "bundle--1b171cff-6776-580b-ad3c-40a9917ad047",
  "objects": [
    {
      "type": "marking-definition",
      "spec_version": "2.1",
      "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
      "created": "2017-01-20T00:00:00.000Z",
      "definition_type": "tlp",
      "name": "TLP:WHITE",
      "definition": {
        "tlp": "white"
      }
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-09-07T00:00:00.000Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "name": "skopnix",
      "identity_class": "organization",
      "description": "skopnix — open threat intelligence. Aggregated and published, not authored: cite the external_references, not us.",
      "contact_information": "https://skopnix.com"
    },
    {
      "type": "intrusion-set",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "name": "STARDUST CHOLLIMA",
      "aliases": [
        "STARDUST CHOLLIMA",
        "Sapphire Sleet",
        "NICKEL GLADSTONE",
        "BeagleBoyz",
        "Bluenoroff",
        "COPERNICIUM"
      ],
      "description": "Open-source reporting has claimed that the Hermes ransomware was developed by the North Korean group STARDUST CHOLLIMA (activities of which have been public reported as part of the “Lazarus Group”), because Hermes was executed on a host during the SWIFT compromise of FEIB in October 2017.",
      "first_seen": "2014-01-01T00:00:00.000Z",
      "last_seen": "2026-07-30T06:05:17.000Z",
      "resource_level": "government",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "G0082",
          "url": "https://attack.mitre.org/groups/G0082/"
        },
        {
          "source_name": "skopnix",
          "external_id": "stardust-chollima",
          "url": "https://skopnix.com/actors/stardust-chollima"
        },
        {
          "source_name": "crowdstrike.com",
          "url": "https://www.crowdstrike.com/blog/big-game-hunting-with-ryuk-another-lucrative-targeted-ransomware/"
        },
        {
          "source_name": "attack.mitre.org",
          "url": "https://attack.mitre.org/groups/G0082"
        },
        {
          "source_name": "go.crowdstrike.com",
          "url": "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2021GTR.pdf"
        },
        {
          "source_name": "justice.gov",
          "url": "https://www.justice.gov/opa/pr/three-north-korean-military-hackers-indicted-wide-ranging-scheme-commit-cyberattacks-and"
        },
        {
          "source_name": "us-cert.cisa.gov",
          "url": "https://us-cert.cisa.gov/ncas/alerts/aa20-239a"
        },
        {
          "source_name": "services.google.com",
          "url": "https://services.google.com/fh/files/misc/apt38-un-usual-suspects.pdf"
        },
        {
          "source_name": "securelist.com",
          "url": "https://securelist.com/lazarus-under-the-hood/77908/"
        },
        {
          "source_name": "crowdstrike.com",
          "url": "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-april-stardust-chollima/"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--6251f3cb-756e-56ba-8cf4-b81e297887d3",
      "name": "Domains",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1583.001",
          "url": "https://attack.mitre.org/techniques/T1583/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--4482b1aa-7ad8-547f-83e9-4066eeafae98",
      "name": "Virtual Private Server",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1583.003",
          "url": "https://attack.mitre.org/techniques/T1583/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--d205a6fa-1162-5237-bb35-b7e28ab0fc74",
      "name": "Web Services",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1583.006",
          "url": "https://attack.mitre.org/techniques/T1583/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--9597bb5b-3766-58db-959d-b36369007f8d",
      "name": "Social Media Accounts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1585.001",
          "url": "https://attack.mitre.org/techniques/T1585/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--904b9e3b-7d66-5d85-91f7-87d505c59a98",
      "name": "Email Accounts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1585.002",
          "url": "https://attack.mitre.org/techniques/T1585/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--38367eac-0f18-5442-8338-a4df5bcad434",
      "name": "Cloud Accounts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1586.003",
          "url": "https://attack.mitre.org/techniques/T1586/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--be6b06f6-2757-56ad-8d53-c6ac3118fa00",
      "name": "Tool",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1588.002",
          "url": "https://attack.mitre.org/techniques/T1588/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--03041285-abc7-5836-9908-13316a674531",
      "name": "Upload Malware",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1608.001",
          "url": "https://attack.mitre.org/techniques/T1608/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--36ee37f2-9509-5038-bdfa-156962c1bb1b",
      "name": "Written Content",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1683.001",
          "url": "https://attack.mitre.org/techniques/T1683/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--a51fd8ac-5b4b-598e-bd7a-3fae18063969",
      "name": "Audio-Visual Content",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1683.002",
          "url": "https://attack.mitre.org/techniques/T1683/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "resource-development"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--a09471aa-93fe-54b1-a009-7912f317e600",
      "name": "Drive-by Compromise",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1189",
          "url": "https://attack.mitre.org/techniques/T1189/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--8cb57063-c9ce-577d-9dca-e49686d0591d",
      "name": "Compromise Software Dependencies and Development Tools",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1195.001",
          "url": "https://attack.mitre.org/techniques/T1195/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--455a6e95-5b37-5030-a9c8-4c2aa8119ca9",
      "name": "Spearphishing Attachment",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1566.001",
          "url": "https://attack.mitre.org/techniques/T1566/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--fecd1b8d-5fe0-5248-a6df-87781d283801",
      "name": "Spearphishing Link",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1566.002",
          "url": "https://attack.mitre.org/techniques/T1566/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--af307f20-df58-58e9-873b-760eb62c1afd",
      "name": "Spearphishing via Service",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1566.003",
          "url": "https://attack.mitre.org/techniques/T1566/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--c441058e-397c-540b-9376-43184f9f58f6",
      "name": "Cron",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1053.003",
          "url": "https://attack.mitre.org/techniques/T1053/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--deb85c75-2dea-5914-91d7-564352397fc6",
      "name": "Scheduled Task",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1053.005",
          "url": "https://attack.mitre.org/techniques/T1053/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--53ae97b9-2436-5d31-9ccf-4dc1ce78c5bd",
      "name": "Systemd Timers",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1053.006",
          "url": "https://attack.mitre.org/techniques/T1053/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--cb1904b4-6302-55f3-8c98-268cb585da16",
      "name": "PowerShell",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.001",
          "url": "https://attack.mitre.org/techniques/T1059/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--d688ca60-a1b0-5709-af4b-7bcac4745e61",
      "name": "AppleScript",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.002",
          "url": "https://attack.mitre.org/techniques/T1059/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--111cc564-56b3-5368-8b57-092f566fe2de",
      "name": "Windows Command Shell",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.003",
          "url": "https://attack.mitre.org/techniques/T1059/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0968668b-c601-577e-b6ab-743ce54e4499",
      "name": "Unix Shell",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.004",
          "url": "https://attack.mitre.org/techniques/T1059/004/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--fe8ba2f0-edf6-5db4-a11e-6c04cb158009",
      "name": "Visual Basic",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.005",
          "url": "https://attack.mitre.org/techniques/T1059/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e2b3e980-426a-5fb8-a98a-fa88e7e77eba",
      "name": "Python",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.006",
          "url": "https://attack.mitre.org/techniques/T1059/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--161497c1-55a4-5a1e-b82f-0967305ec89c",
      "name": "JavaScript",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059.007",
          "url": "https://attack.mitre.org/techniques/T1059/007/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--cd33758f-3753-51cd-8cb5-c5cccfa32a61",
      "name": "Native API",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1106",
          "url": "https://attack.mitre.org/techniques/T1106/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e17c0174-ff05-5d6f-8998-b1f9cf9cdd54",
      "name": "Malicious Link",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1204.001",
          "url": "https://attack.mitre.org/techniques/T1204/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--5fca71f8-fdc7-5a29-a449-bae25d7dc890",
      "name": "Malicious File",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1204.002",
          "url": "https://attack.mitre.org/techniques/T1204/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--532b32d7-1010-5496-a626-8abe7cf32960",
      "name": "Service Execution",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1569.002",
          "url": "https://attack.mitre.org/techniques/T1569/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e747efd7-c856-5d0d-8dfe-5f1c15ddf8aa",
      "name": "Poisoned Pipeline Execution",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1677",
          "url": "https://attack.mitre.org/techniques/T1677/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--84f1da9c-aa38-5068-bb1a-86e7df66690d",
      "name": "Web Shell",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1505.003",
          "url": "https://attack.mitre.org/techniques/T1505/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "persistence"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--55fbbc32-53a9-5697-b4a2-f76eff6369e3",
      "name": "Launch Agent",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1543.001",
          "url": "https://attack.mitre.org/techniques/T1543/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "persistence"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--d6564283-cb2e-5245-962e-31a883b2656c",
      "name": "Windows Service",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1543.003",
          "url": "https://attack.mitre.org/techniques/T1543/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "persistence"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--ce4ec167-3c9f-5cb0-8661-bec76705b422",
      "name": "Launch Daemon",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1543.004",
          "url": "https://attack.mitre.org/techniques/T1543/004/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "persistence"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--7f5faf4c-64c8-5ce5-94f8-af8f5cfd82de",
      "name": "Registry Run Keys / Startup Folder",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1547.001",
          "url": "https://attack.mitre.org/techniques/T1547/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "persistence"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--4c8e24a7-0b7f-58a7-8d66-a8e79ea2c765",
      "name": "Installer Packages",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1546.016",
          "url": "https://attack.mitre.org/techniques/T1546/016/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "privilege-escalation"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--1a1ff755-4b57-506c-8311-bb4e5dfb1a98",
      "name": "Bypass User Account Control",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1548.002",
          "url": "https://attack.mitre.org/techniques/T1548/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "privilege-escalation"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--a5c726a4-5494-5bcf-b2c1-5fb45f059a72",
      "name": "Sudo and Sudo Caching",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1548.003",
          "url": "https://attack.mitre.org/techniques/T1548/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "privilege-escalation"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--861dafc5-819f-5c6d-8e90-18b56474bead",
      "name": "TCC Manipulation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1548.006",
          "url": "https://attack.mitre.org/techniques/T1548/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "privilege-escalation"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--917d444c-a80c-500f-90b0-01222354508e",
      "name": "Software Packing",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1027.002",
          "url": "https://attack.mitre.org/techniques/T1027/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--df0ad56d-a852-5fce-a819-8b8e0581c14f",
      "name": "Command Obfuscation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1027.010",
          "url": "https://attack.mitre.org/techniques/T1027/010/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--1e841714-1415-5ede-ba52-a008ffb19793",
      "name": "Compression",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1027.015",
          "url": "https://attack.mitre.org/techniques/T1027/015/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--88cab3a7-825b-5d5f-bd37-99f554ed67ca",
      "name": "Junk Code Insertion",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1027.016",
          "url": "https://attack.mitre.org/techniques/T1027/016/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--97304428-87b5-589b-80e0-4b46f0bae516",
      "name": "Rename Legitimate Utilities",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1036.003",
          "url": "https://attack.mitre.org/techniques/T1036/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--38c56b01-4c61-5ed2-a4aa-bbc3328c26db",
      "name": "Match Legitimate Resource Name or Location",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1036.005",
          "url": "https://attack.mitre.org/techniques/T1036/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--052ab6b5-63a2-52a8-a5b3-f74e948565d9",
      "name": "Space after Filename",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1036.006",
          "url": "https://attack.mitre.org/techniques/T1036/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e5158b7b-3aeb-591e-90bb-6978273de408",
      "name": "Masquerade File Type",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1036.008",
          "url": "https://attack.mitre.org/techniques/T1036/008/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--79545d61-18c4-5ab6-bfd8-eeebf93f214a",
      "name": "Process Injection",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1055",
          "url": "https://attack.mitre.org/techniques/T1055/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--25be685b-ba69-523d-ae22-5040e28cf0a0",
      "name": "Clear Command History",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1070.003",
          "url": "https://attack.mitre.org/techniques/T1070/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--931c991a-05e7-53eb-ad45-446ee1e76208",
      "name": "File Deletion",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1070.004",
          "url": "https://attack.mitre.org/techniques/T1070/004/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0913d299-853e-5e6d-9061-c0f1af915f2c",
      "name": "Timestomp",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1070.006",
          "url": "https://attack.mitre.org/techniques/T1070/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--b568d4de-f822-5177-9450-a4bc9bf1c777",
      "name": "Local Accounts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1078.003",
          "url": "https://attack.mitre.org/techniques/T1078/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--b650b592-0635-5bf2-ba9e-249d56362ddd",
      "name": "Cloud Accounts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1078.004",
          "url": "https://attack.mitre.org/techniques/T1078/004/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--4b969def-2fff-5bb3-8343-f00548d349d4",
      "name": "Deobfuscate/Decode Files or Information",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1140",
          "url": "https://attack.mitre.org/techniques/T1140/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--ec5ff51d-b979-5c39-be15-185a643f2ff6",
      "name": "Compiled HTML File",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1218.001",
          "url": "https://attack.mitre.org/techniques/T1218/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--b29f4608-ddf5-559f-8251-d82aff3ee25a",
      "name": "Mshta",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1218.005",
          "url": "https://attack.mitre.org/techniques/T1218/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--3f99ef52-60b2-5ac0-9269-79caa4bd24db",
      "name": "Msiexec",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1218.007",
          "url": "https://attack.mitre.org/techniques/T1218/007/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0303fe9f-35de-5bc4-ae07-7ef0f51ab40a",
      "name": "Rundll32",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1218.011",
          "url": "https://attack.mitre.org/techniques/T1218/011/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--9bd33ccc-fad0-590b-b8f1-d47d1e009365",
      "name": "Execution Guardrails",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1480",
          "url": "https://attack.mitre.org/techniques/T1480/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--f714b6c1-67fa-5dbd-9855-5aee2f28adb8",
      "name": "Mutual Exclusion",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1480.002",
          "url": "https://attack.mitre.org/techniques/T1480/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--17acf6fe-f3f7-5843-b08e-0d026e665393",
      "name": "Hidden Window",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1564.003",
          "url": "https://attack.mitre.org/techniques/T1564/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e6c52e39-4ba0-57c5-8718-571b666e8618",
      "name": "Ignore Process Interrupts",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1564.011",
          "url": "https://attack.mitre.org/techniques/T1564/011/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--475b5a50-fd55-5d30-a68c-6f4ca7eb99f6",
      "name": "File/Path Exclusions",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1564.012",
          "url": "https://attack.mitre.org/techniques/T1564/012/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--88cdc44d-7226-5b68-8d35-d6beff4fc755",
      "name": "Reflective Code Loading",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1620",
          "url": "https://attack.mitre.org/techniques/T1620/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--126db1c9-aec8-5044-8874-ab6baef07e31",
      "name": "Delay Execution",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1678",
          "url": "https://attack.mitre.org/techniques/T1678/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--5afe3ece-a974-5715-ad4f-ce8a2520e1c4",
      "name": "Impersonation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1684.001",
          "url": "https://attack.mitre.org/techniques/T1684/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "stealth"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--5f303304-a21b-5795-bd78-1015865a756d",
      "name": "Brute Force",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1110",
          "url": "https://attack.mitre.org/techniques/T1110/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--fd5932ed-dd64-5fc4-8360-73cccb334447",
      "name": "Shell History",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1552.003",
          "url": "https://attack.mitre.org/techniques/T1552/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--46d9b740-b336-5acc-a7ed-a26f4305b6fa",
      "name": "Private Keys",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1552.004",
          "url": "https://attack.mitre.org/techniques/T1552/004/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--3ebb5603-2a17-5c8d-9be1-ec0501fa4f5d",
      "name": "Credentials from Password Stores",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1555",
          "url": "https://attack.mitre.org/techniques/T1555/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--9382ab84-f748-55d1-b2bf-c9f956ab10c3",
      "name": "Keychain",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1555.001",
          "url": "https://attack.mitre.org/techniques/T1555/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--250e6bce-6fe3-562f-92b9-2e984f0f8290",
      "name": "Credentials from Web Browsers",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1555.003",
          "url": "https://attack.mitre.org/techniques/T1555/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "credential-access"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--2883c1c1-283b-57d1-9dfc-da5f0e29cfcf",
      "name": "Query Registry",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1012",
          "url": "https://attack.mitre.org/techniques/T1012/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--28c49cd6-4c32-5796-ba30-dd9a3f8dded8",
      "name": "System Owner/User Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1033",
          "url": "https://attack.mitre.org/techniques/T1033/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--f83e565d-fdbf-5c07-a2bd-1c325c375ce5",
      "name": "System Network Connections Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1049",
          "url": "https://attack.mitre.org/techniques/T1049/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--a0df756b-eb37-587c-a8e1-16e7b1f30dc0",
      "name": "Process Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1057",
          "url": "https://attack.mitre.org/techniques/T1057/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--d6ae27d1-3519-5b9c-969e-a35f719bb1de",
      "name": "System Information Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1082",
          "url": "https://attack.mitre.org/techniques/T1082/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--6b2a7457-c429-5164-a557-f1c9e86da99b",
      "name": "File and Directory Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1083",
          "url": "https://attack.mitre.org/techniques/T1083/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--7a5e8cf5-cb9d-596b-b723-6f0bb5d40e49",
      "name": "System Time Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1124",
          "url": "https://attack.mitre.org/techniques/T1124/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--bbc3fae3-ef14-5081-8415-be8a18b6d044",
      "name": "Network Share Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1135",
          "url": "https://attack.mitre.org/techniques/T1135/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--73611d76-6eef-5ba9-b217-e6687368ef55",
      "name": "Browser Information Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1217",
          "url": "https://attack.mitre.org/techniques/T1217/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--8700a7a3-05ec-5658-b111-1ed75d9321cb",
      "name": "Software Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1518",
          "url": "https://attack.mitre.org/techniques/T1518/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--aa223b10-a214-5ccb-bdde-66a535142526",
      "name": "Security Software Discovery",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1518.001",
          "url": "https://attack.mitre.org/techniques/T1518/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "discovery"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--62b9c5ff-ec00-543e-9246-fb650bc3046e",
      "name": "Data from Local System",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1005",
          "url": "https://attack.mitre.org/techniques/T1005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--cab14c2e-0c53-58bd-98d4-58a5e68ef590",
      "name": "Keylogging",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1056.001",
          "url": "https://attack.mitre.org/techniques/T1056/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--969d23c1-d2f5-5505-a662-75ad25071370",
      "name": "GUI Input Capture",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1056.002",
          "url": "https://attack.mitre.org/techniques/T1056/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--459c1ace-e45f-57ac-8239-f29487282ce9",
      "name": "Local Data Staging",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1074.001",
          "url": "https://attack.mitre.org/techniques/T1074/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--f3751ba7-4bbe-566d-bca5-02061a34fb6e",
      "name": "Clipboard Data",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1115",
          "url": "https://attack.mitre.org/techniques/T1115/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--2c5c3c2e-68d5-5458-a5ef-d9acbe02f588",
      "name": "Messaging Applications",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1213.005",
          "url": "https://attack.mitre.org/techniques/T1213/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--6cda6ad3-09fe-5306-b810-90655cbe6a90",
      "name": "Databases",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1213.006",
          "url": "https://attack.mitre.org/techniques/T1213/006/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e6e2b517-832b-5feb-a9e0-a147b8ba20c9",
      "name": "Archive via Utility",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1560.001",
          "url": "https://attack.mitre.org/techniques/T1560/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "collection"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--09a3f2a6-2845-595b-81f0-17c4f55b8caa",
      "name": "Web Protocols",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1071.001",
          "url": "https://attack.mitre.org/techniques/T1071/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "command-and-control"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--3a8119a6-da4e-575c-929e-78200e2c20b7",
      "name": "Ingress Tool Transfer",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1105",
          "url": "https://attack.mitre.org/techniques/T1105/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "command-and-control"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--1d031457-774a-5a6d-8185-83dcedf708f0",
      "name": "Standard Encoding",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1132.001",
          "url": "https://attack.mitre.org/techniques/T1132/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "command-and-control"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--c7288879-074a-59f8-b3d2-6ea182eeeb45",
      "name": "Non-Standard Port",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1571",
          "url": "https://attack.mitre.org/techniques/T1571/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "command-and-control"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--747a88c6-df57-5d8a-a73b-94ee258ce601",
      "name": "Exfiltration Over C2 Channel",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1041",
          "url": "https://attack.mitre.org/techniques/T1041/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "exfiltration"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--d45a59e9-28a8-553c-9f97-c94fd51c11cb",
      "name": "Exfiltration Over Asymmetric Encrypted Non-C2 Protocol",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1048.002",
          "url": "https://attack.mitre.org/techniques/T1048/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "exfiltration"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--ca7b15bf-f126-58cf-a2bb-e0ba0f1d8364",
      "name": "Exfiltration Over Web Service",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1567",
          "url": "https://attack.mitre.org/techniques/T1567/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "exfiltration"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--3c0fc898-93f4-5224-920a-1092aeca41a3",
      "name": "Modify Registry",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1112",
          "url": "https://attack.mitre.org/techniques/T1112/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--187d8b76-b82b-5372-9fac-5c00e322837e",
      "name": "Linux and Mac Permissions",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1222.002",
          "url": "https://attack.mitre.org/techniques/T1222/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--cd473987-d7fd-5dba-aff5-76f723a16f9b",
      "name": "Mark-of-the-Web Bypass",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1553.005",
          "url": "https://attack.mitre.org/techniques/T1553/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--89610a4e-c478-54a9-b9f3-a1ba1d06fc48",
      "name": "Disable or Modify Tools",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1685",
          "url": "https://attack.mitre.org/techniques/T1685/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--931c8460-5319-5c9f-b034-f9796ba398d8",
      "name": "Modify or Spoof Tool UI",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1685.003",
          "url": "https://attack.mitre.org/techniques/T1685/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--c99d6641-9cd9-5776-b0b8-edccc58d7351",
      "name": "Clear Windows Event Logs",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1685.005",
          "url": "https://attack.mitre.org/techniques/T1685/005/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0fa14b7c-2630-5249-be53-f3d040057e57",
      "name": "Disable or Modify System Firewall",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1686",
          "url": "https://attack.mitre.org/techniques/T1686/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0a4cc75e-5508-540b-95c7-38449f3abb28",
      "name": "Network Device Firewall",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1686.002",
          "url": "https://attack.mitre.org/techniques/T1686/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--043a38ec-4a65-5950-8e45-e6ebb3378c0c",
      "name": "Prevent Command History Logging",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1690",
          "url": "https://attack.mitre.org/techniques/T1690/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "defense-impairment"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--43bc9d21-5881-5ff8-a15a-b425d6597d36",
      "name": "Data Destruction",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1485",
          "url": "https://attack.mitre.org/techniques/T1485/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--c8b78ebe-d7a4-50da-a7d8-3c062ebffa83",
      "name": "Data Encrypted for Impact",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1486",
          "url": "https://attack.mitre.org/techniques/T1486/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--e12e4364-2517-5c9a-b3db-04e39fa0414a",
      "name": "System Shutdown/Reboot",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1529",
          "url": "https://attack.mitre.org/techniques/T1529/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--0f776c84-1b86-5ab1-9b4d-70a2c75449b1",
      "name": "Disk Structure Wipe",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1561.002",
          "url": "https://attack.mitre.org/techniques/T1561/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--36670ed5-b201-5046-948b-1e746456f9fc",
      "name": "Stored Data Manipulation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1565.001",
          "url": "https://attack.mitre.org/techniques/T1565/001/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--f162c90c-e813-57b1-9476-cf7ffbbbefa8",
      "name": "Transmitted Data Manipulation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1565.002",
          "url": "https://attack.mitre.org/techniques/T1565/002/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--9883a24c-614d-5983-a687-f3809ea61ee1",
      "name": "Runtime Data Manipulation",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1565.003",
          "url": "https://attack.mitre.org/techniques/T1565/003/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "attack-pattern--1fe5869f-309d-59cc-9bc1-bf23684e0b2b",
      "name": "Financial Theft",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1657",
          "url": "https://attack.mitre.org/techniques/T1657/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "impact"
        }
      ]
    },
    {
      "type": "malware",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "malware--b1a5b2b8-ef08-519c-aab1-998822aaaead",
      "name": "ECCENTRICBANDWAGON",
      "is_family": true,
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0593",
          "url": "https://attack.mitre.org/software/S0593/"
        }
      ]
    },
    {
      "type": "malware",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "malware--251cd14e-a46d-5124-8b2f-f8f21971097b",
      "name": "HOPLIGHT",
      "is_family": true,
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0376",
          "url": "https://attack.mitre.org/software/S0376/"
        }
      ]
    },
    {
      "type": "malware",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "malware--345784da-41db-54fa-aef6-89930c9ea209",
      "name": "KillDisk",
      "is_family": true,
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0607",
          "url": "https://attack.mitre.org/software/S0607/"
        }
      ]
    },
    {
      "type": "malware",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "malware--0d75d83e-e665-5ffb-897b-2f799a558a21",
      "name": "DarkComet",
      "is_family": true,
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0334",
          "url": "https://attack.mitre.org/software/S0334/"
        }
      ]
    },
    {
      "type": "tool",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "tool--83e8900b-0bd1-5b50-8eec-55c9d31d202d",
      "name": "Net",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0039",
          "url": "https://attack.mitre.org/software/S0039/"
        }
      ]
    },
    {
      "type": "tool",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "tool--c3bed45a-e5cf-58e1-93d5-76905668062b",
      "name": "Mimikatz",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "S0002",
          "url": "https://attack.mitre.org/software/S0002/"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--74476d6e-f0b3-5169-a20f-e3c24d6395f1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--6251f3cb-756e-56ba-8cf4-b81e297887d3"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--7d8fd0d6-b15b-5071-b1ad-33c8a52c7e26",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--4482b1aa-7ad8-547f-83e9-4066eeafae98"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--285813ea-52bf-587f-9157-8cf9d7c46aef",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--d205a6fa-1162-5237-bb35-b7e28ab0fc74"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--4a637d8f-da38-56f4-ab98-c689c653a251",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--9597bb5b-3766-58db-959d-b36369007f8d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--c03c769e-3646-533f-b467-ab1d2e200d71",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--904b9e3b-7d66-5d85-91f7-87d505c59a98"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--dfea34e0-5236-5a0f-b0c0-db56b9bcb074",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--38367eac-0f18-5442-8338-a4df5bcad434"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--d8be80e6-a60b-59f6-9275-e9b19ed0688d",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--be6b06f6-2757-56ad-8d53-c6ac3118fa00"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--c3c78a53-007c-5e6e-ad69-5f29fa673e44",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--03041285-abc7-5836-9908-13316a674531"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2cc557bf-efa4-59d3-931c-acfc09aa4731",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--36ee37f2-9509-5038-bdfa-156962c1bb1b"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--6ebd5a9b-b781-50f4-9aed-503f732e1e18",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--a51fd8ac-5b4b-598e-bd7a-3fae18063969"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--80ad8a54-e586-5191-87f4-68eaa7d5113c",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--a09471aa-93fe-54b1-a009-7912f317e600"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--756eda01-2feb-5966-b866-6cfd5cce82e5",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--8cb57063-c9ce-577d-9dca-e49686d0591d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--3a5fa7b0-0aae-5ffc-938c-af8ccac44eb7",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--455a6e95-5b37-5030-a9c8-4c2aa8119ca9"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0b900f09-b21d-58ae-9abc-7abe5bfe657f",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--fecd1b8d-5fe0-5248-a6df-87781d283801"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8d330bf8-703f-557d-a910-9c301f1951ab",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--af307f20-df58-58e9-873b-760eb62c1afd"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--1d8d1eb9-0dd6-552f-8263-41587ae8b43a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--c441058e-397c-540b-9376-43184f9f58f6"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--db2c201e-6efa-5ed2-8565-d54a79efde13",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--deb85c75-2dea-5914-91d7-564352397fc6"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--fdb9a3b4-025f-5342-a595-7342e6bba70d",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--53ae97b9-2436-5d31-9ccf-4dc1ce78c5bd"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--69bb0bfc-8011-513a-9e6b-3eed6db05ab0",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--cb1904b4-6302-55f3-8c98-268cb585da16"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--10050d1c-d576-5cac-a3fa-62b2a2e16f52",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--d688ca60-a1b0-5709-af4b-7bcac4745e61"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--86582d3c-64d2-5f78-acfa-5fda3fe9607e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--111cc564-56b3-5368-8b57-092f566fe2de"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--9dd419f2-e8f2-53ab-973e-c59afd37106a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0968668b-c601-577e-b6ab-743ce54e4499"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--5207e993-ae70-5d71-8c91-5bd974252263",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--fe8ba2f0-edf6-5db4-a11e-6c04cb158009"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--b3ebcf26-06d5-5b8b-9a18-ac1f1d5d1eb7",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e2b3e980-426a-5fb8-a98a-fa88e7e77eba"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--1b3f0e56-6d6e-5a08-9177-9e7089171088",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--161497c1-55a4-5a1e-b82f-0967305ec89c"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--b69368d2-db90-5e03-8058-3d5efcfaf445",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--cd33758f-3753-51cd-8cb5-c5cccfa32a61"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--e366b009-04d5-5853-a5a6-1cc586f95796",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e17c0174-ff05-5d6f-8998-b1f9cf9cdd54"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--952cc90a-4acc-5f1b-951a-c4b9d5e3f663",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--5fca71f8-fdc7-5a29-a449-bae25d7dc890"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--f4e98e42-e073-5aa0-8065-99bab737b43a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--532b32d7-1010-5496-a626-8abe7cf32960"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8e7f0dc6-54c8-5cde-b972-ebb7e4cbbbce",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e747efd7-c856-5d0d-8dfe-5f1c15ddf8aa"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--3bf85909-e1f3-59d2-8886-a9249284dde1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--84f1da9c-aa38-5068-bb1a-86e7df66690d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--48ed1f7e-2a3f-57fb-a1cf-df60c05818fc",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--55fbbc32-53a9-5697-b4a2-f76eff6369e3"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0ce38381-67ee-5bf7-8a50-ad632a8a90fa",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--d6564283-cb2e-5245-962e-31a883b2656c"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--ff4170d5-617b-51e5-bf28-07a4883b88f8",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--ce4ec167-3c9f-5cb0-8661-bec76705b422"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--85bd393b-cf0b-579e-9718-7b5788c55d57",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--7f5faf4c-64c8-5ce5-94f8-af8f5cfd82de"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--10d37a5a-4413-5f85-80c9-c1e457713e6b",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--4c8e24a7-0b7f-58a7-8d66-a8e79ea2c765"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0ed44c61-e252-5a15-83ff-2ff788760733",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--1a1ff755-4b57-506c-8311-bb4e5dfb1a98"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--521f1140-e958-5883-a131-b2077899157f",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--a5c726a4-5494-5bcf-b2c1-5fb45f059a72"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--cf074807-7976-5a21-8099-0fa43a9ce077",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--861dafc5-819f-5c6d-8e90-18b56474bead"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--26ebb0e6-dc2a-50a3-ac50-57da6f9c3bb1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--917d444c-a80c-500f-90b0-01222354508e"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--d9d75a21-6007-5a9b-9bad-e761ba0f695f",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--df0ad56d-a852-5fce-a819-8b8e0581c14f"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--872f7c31-05b4-5795-b18e-76028a01034e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--1e841714-1415-5ede-ba52-a008ffb19793"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--67d17409-458f-5a91-9283-0f347df9395b",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--88cab3a7-825b-5d5f-bd37-99f554ed67ca"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--1d4f5c2e-67d3-5dc9-9753-686d8d50cbdf",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--97304428-87b5-589b-80e0-4b46f0bae516"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--246ba304-d0f0-5e83-a792-8c6f11aa5c40",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--38c56b01-4c61-5ed2-a4aa-bbc3328c26db"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--6b1b28cf-9161-57b5-8fbf-e7f06166a399",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--052ab6b5-63a2-52a8-a5b3-f74e948565d9"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--9ab5c7c3-392c-51ba-aff6-5759570f54f0",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e5158b7b-3aeb-591e-90bb-6978273de408"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--88a4e1d6-91f2-5605-8e36-f157d43133fb",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--79545d61-18c4-5ab6-bfd8-eeebf93f214a"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--53cd44ca-5b1f-55a4-a088-a5a746de1ce7",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--25be685b-ba69-523d-ae22-5040e28cf0a0"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--f8014e3b-a7d4-569b-8736-c785610fc64a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--931c991a-05e7-53eb-ad45-446ee1e76208"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--790ee70e-1525-50b9-b72f-fe21f755b839",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0913d299-853e-5e6d-9061-c0f1af915f2c"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8069f0c5-2767-5431-b53d-25d96c3a1d48",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--b568d4de-f822-5177-9450-a4bc9bf1c777"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--b2ec2c6d-039a-5f65-9e17-bc8c2c7faab4",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--b650b592-0635-5bf2-ba9e-249d56362ddd"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--276652a1-b7f1-5514-b875-4d76e1716b30",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--4b969def-2fff-5bb3-8343-f00548d349d4"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2ce96f31-6e94-5c63-811e-418c7c421c50",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--ec5ff51d-b979-5c39-be15-185a643f2ff6"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--d339c547-2c57-5c4a-9460-3e9afa84622b",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--b29f4608-ddf5-559f-8251-d82aff3ee25a"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--73866bde-8971-5369-8ec3-fd57a290b505",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--3f99ef52-60b2-5ac0-9269-79caa4bd24db"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--df436b17-76a7-58b7-8667-7422171f0d61",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0303fe9f-35de-5bc4-ae07-7ef0f51ab40a"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--13fd36b6-7d89-5105-9742-3283d6e4b0b5",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--9bd33ccc-fad0-590b-b8f1-d47d1e009365"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--06028a6c-af1b-5f9e-9728-ef0df468861c",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--f714b6c1-67fa-5dbd-9855-5aee2f28adb8"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8b5eb638-f0fc-5a16-870c-b80dca7747b1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--17acf6fe-f3f7-5843-b08e-0d026e665393"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--64e74099-0332-5185-a153-051257fa160d",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e6c52e39-4ba0-57c5-8718-571b666e8618"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--ffc5d1a4-27c2-5233-b46b-172e7d8f59e2",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--475b5a50-fd55-5d30-a68c-6f4ca7eb99f6"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--c219a60a-1ed5-58c2-998e-66a10e5c4b39",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--88cdc44d-7226-5b68-8d35-d6beff4fc755"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--265a966d-1be9-502e-976d-cc08f88f5e9e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--126db1c9-aec8-5044-8874-ab6baef07e31"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0424c8f5-42e0-5102-84b4-ed5a41353fb1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--5afe3ece-a974-5715-ad4f-ce8a2520e1c4"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--38e30a31-dc7d-5bd8-a77b-2f7e110ce8e4",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--5f303304-a21b-5795-bd78-1015865a756d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--44f0471f-8c08-5201-83d4-9a715e6db5b7",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--fd5932ed-dd64-5fc4-8360-73cccb334447"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--3256ac09-9dfa-557a-9301-0818fe1c584c",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--46d9b740-b336-5acc-a7ed-a26f4305b6fa"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--e73cdeda-c365-5dab-b42e-a052d7391a23",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--3ebb5603-2a17-5c8d-9be1-ec0501fa4f5d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--9dbd930f-d3ca-5dbf-bb68-b22864d543ea",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--9382ab84-f748-55d1-b2bf-c9f956ab10c3"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--a1edca79-ea8c-52d7-af1d-da30b48c7b8a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--250e6bce-6fe3-562f-92b9-2e984f0f8290"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8c5b146d-01a9-5500-971f-ba486e482723",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--2883c1c1-283b-57d1-9dfc-da5f0e29cfcf"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--d9b4a978-c382-519b-9072-a2f2a00e6841",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--28c49cd6-4c32-5796-ba30-dd9a3f8dded8"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--5387fba8-a169-5311-9c07-e2bcd0e84436",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--f83e565d-fdbf-5c07-a2bd-1c325c375ce5"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--6ae78b61-50bf-55e2-bd1d-94a09c1d020e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--a0df756b-eb37-587c-a8e1-16e7b1f30dc0"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--5760504b-9ec7-5ee6-901b-d0f9cbe1388b",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--d6ae27d1-3519-5b9c-969e-a35f719bb1de"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--c4b3f62b-e4db-549e-8105-0ceec5970774",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--6b2a7457-c429-5164-a557-f1c9e86da99b"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--f0d93442-c207-5614-b473-5d7284631e3c",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--7a5e8cf5-cb9d-596b-b723-6f0bb5d40e49"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--d3ee0214-93e1-5b68-b8d3-052cfc874f36",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--bbc3fae3-ef14-5081-8415-be8a18b6d044"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--711aa518-d696-59f1-a937-fc174172bdad",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--73611d76-6eef-5ba9-b217-e6687368ef55"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--570d57bf-a998-5959-8421-96f1bbc7d89e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--8700a7a3-05ec-5658-b111-1ed75d9321cb"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--37066347-2752-54ac-9a37-fa232e155642",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--aa223b10-a214-5ccb-bdde-66a535142526"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--bde33bf2-d17f-5cae-9c40-1cb0ef7c8c38",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--62b9c5ff-ec00-543e-9246-fb650bc3046e"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--dbce1541-23f8-5cca-8829-bb542ad95789",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--cab14c2e-0c53-58bd-98d4-58a5e68ef590"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--39e2b1b3-fdab-5933-aea8-a828ee51b6bc",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--969d23c1-d2f5-5505-a662-75ad25071370"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--ff4c6148-4b37-5b1a-badb-f2d9a2c898b5",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--459c1ace-e45f-57ac-8239-f29487282ce9"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--8d5e6510-6d5b-57b3-9733-6ccb153596e2",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--f3751ba7-4bbe-566d-bca5-02061a34fb6e"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--cac3621d-e196-5014-a178-e010b78610ad",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--2c5c3c2e-68d5-5458-a5ef-d9acbe02f588"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--9fa16afb-7648-5e30-b9e2-e8ab7f7638d8",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--6cda6ad3-09fe-5306-b810-90655cbe6a90"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--e5461ac9-89bf-5911-885a-3acc88f69f4c",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e6e2b517-832b-5feb-a9e0-a147b8ba20c9"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--94c1e946-a2d5-546f-a8b8-474d01339b1e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--09a3f2a6-2845-595b-81f0-17c4f55b8caa"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--9aca8392-0a61-5f5e-9bf0-b4e0a815054e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--3a8119a6-da4e-575c-929e-78200e2c20b7"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--627bde43-290d-5fcd-9665-013d4cbce3bf",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--1d031457-774a-5a6d-8185-83dcedf708f0"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--260f2fa7-687e-5eb2-8e9d-dc50e9c0c9ee",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--c7288879-074a-59f8-b3d2-6ea182eeeb45"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0b628364-6673-5cea-9479-48f1bd577f60",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--747a88c6-df57-5d8a-a73b-94ee258ce601"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--08de3d6d-ba81-56f2-9b9a-59d1cebfd077",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--d45a59e9-28a8-553c-9f97-c94fd51c11cb"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--1f78072e-9462-558b-930c-323d82c778e1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--ca7b15bf-f126-58cf-a2bb-e0ba0f1d8364"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--6b0e0c77-1200-5bf1-841d-7e70234f8865",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--3c0fc898-93f4-5224-920a-1092aeca41a3"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2659cea6-610d-5ecb-aec8-b7f50010c900",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--187d8b76-b82b-5372-9fac-5c00e322837e"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--a5b94e51-9194-5ebe-88fe-9a51ea6682e1",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--cd473987-d7fd-5dba-aff5-76f723a16f9b"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--05efc865-f401-521d-8360-ae28ee3eb2fc",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--89610a4e-c478-54a9-b9f3-a1ba1d06fc48"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2d846c9e-ff14-51dc-9b31-9601af91d017",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--931c8460-5319-5c9f-b034-f9796ba398d8"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--e6f8b097-f694-52b0-adea-2692c1cab284",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--c99d6641-9cd9-5776-b0b8-edccc58d7351"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2ec11725-f707-55ad-b62a-135665bc30c5",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0fa14b7c-2630-5249-be53-f3d040057e57"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--2946a6b7-ebb2-5e8f-9def-9380becf51ba",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0a4cc75e-5508-540b-95c7-38449f3abb28"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--230197dc-34cd-56f0-a430-3d4025139e1d",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--043a38ec-4a65-5950-8e45-e6ebb3378c0c"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--0cadd621-d850-5bd9-93d2-22c725caa8a9",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--43bc9d21-5881-5ff8-a15a-b425d6597d36"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--a57bdde6-81e9-5768-90a3-27afe4b62916",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--c8b78ebe-d7a4-50da-a7d8-3c062ebffa83"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--cc4e3c91-30c5-58a2-a5b6-1f4adda0b0f2",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--e12e4364-2517-5c9a-b3db-04e39fa0414a"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--88507c3c-3ae1-5a0b-812f-5882c6e7bb4e",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--0f776c84-1b86-5ab1-9b4d-70a2c75449b1"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--b79c4fb6-c1f0-528c-b72c-337f632fe2ad",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--36670ed5-b201-5046-948b-1e746456f9fc"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--a7a99d8e-3da6-5a25-a4ce-34eb46f97ce6",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--f162c90c-e813-57b1-9476-cf7ffbbbefa8"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--3351dcbb-49db-55de-9601-6840dfc4a8a6",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--9883a24c-614d-5983-a687-f3809ea61ee1"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--1a7825d3-111d-5635-acca-1eef39c0b29a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "attack-pattern--1fe5869f-309d-59cc-9bc1-bf23684e0b2b"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--b9c6d927-ab6d-5e97-85de-505f1952986a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "malware--b1a5b2b8-ef08-519c-aab1-998822aaaead"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--6c562e02-cb45-5916-b755-f8c8a250e6da",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "malware--251cd14e-a46d-5124-8b2f-f8f21971097b"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--11a26d55-e904-5d87-a876-531574560ac7",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "malware--345784da-41db-54fa-aef6-89930c9ea209"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--a94a311c-89b8-5949-b2d4-a65d89331d6a",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "malware--0d75d83e-e665-5ffb-897b-2f799a558a21"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--adca0be5-310a-523d-a014-40e3a45dfa68",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "tool--83e8900b-0bd1-5b50-8eec-55c9d31d202d"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "created": "2026-09-07T00:00:00.000Z",
      "modified": "2026-10-18T21:35:12.981Z",
      "created_by_ref": "identity--c1b401e5-a927-598d-859c-fc757d058154",
      "object_marking_refs": [
        "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
      ],
      "id": "relationship--233d5e1f-1baa-5f95-8380-308824a9dfba",
      "relationship_type": "uses",
      "source_ref": "intrusion-set--73c9e959-d87a-5e62-bb26-95136c225d67",
      "target_ref": "tool--c3bed45a-e5cf-58e1-93d5-76905668062b"
    }
  ]
}