<?xml version="1.0" encoding="UTF-8"?>
<graphml xmlns="http://graphml.graphdrawing.org/xmlns"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://graphml.graphdrawing.org/xmlns
         http://graphml.graphdrawing.org/xmlns/1.0/graphml.xsd">

  <key id="type" for="node" attr.name="type" attr.type="string"/>
  <key id="confidence" for="node" attr.name="confidence" attr.type="double"/>

  <graph id="G" edgedefault="directed">

    <node id="Chunk(text='<div>\n">
      <data key="label">Chunk(text='<div>\n</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Australia">
      <data key="label">Australia</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Canada">
      <data key="label">Canada</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="New Zealand">
      <data key="label">New Zealand</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="the United Kingdom">
      <data key="label">the United Kingdom</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="United States.[1][2][3][4][5]</p>\n">
      <data key="label">United States.[1][2][3][4][5]</p>\n</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="li>Webshell">
      <data key="label">li>Webshell</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China">
      <data key="label">China</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="li>C2 Obfuscation">
      <data key="label">li>C2 Obfuscation</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Australia">
      <data key="label">Australia</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='Canada">
      <data key="label">Entity(text='Canada</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Canada">
      <data key="label">Canada</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='New Zealand'">
      <data key="label">Entity(text='New Zealand'</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="New Zealand'">
      <data key="label">New Zealand'</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='the United Kingdom'">
      <data key="label">Entity(text='the United Kingdom'</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="the United Kingdom'">
      <data key="label">the United Kingdom'</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=482">
      <data key="label">end_char=482</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China">
      <data key="label">China</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Today">
      <data key="label">Today</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="today">
      <data key="label">today</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="May 2015">
      <data key="label">May 2015</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Frutas">
      <data key="label">Frutas</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Wireshark">
      <data key="label">Wireshark</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Advanced Persistent Threat">
      <data key="label">Advanced Persistent Threat</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="APT">
      <data key="label">APT</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Quasar">
      <data key="label">Quasar</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Java">
      <data key="label">Java</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="MAC">
      <data key="label">MAC</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PII">
      <data key="label">PII</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="early 2018">
      <data key="label">early 2018</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="early 2017">
      <data key="label">early 2017</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Society for Worldwide Interbank Financial Telecommunication">
      <data key="label">Society for Worldwide Interbank Financial Telecommunication</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows Registry">
      <data key="label">Windows Registry</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Task">
      <data key="label">Task</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="li>Significant">
      <data key="label">li>Significant</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="IP">
      <data key="label">IP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=2514">
      <data key="label">end_char=2514</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='May 2015'">
      <data key="label">Entity(text='May 2015'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="May 2015'">
      <data key="label">May 2015'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Frutas">
      <data key="label">Frutas</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=4132">
      <data key="label">end_char=4132</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="APT">
      <data key="label">APT</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Quasar">
      <data key="label">Quasar</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Java">
      <data key="label">Java</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='MAC">
      <data key="label">Entity(text='MAC</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=4752">
      <data key="label">end_char=4752</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="MAC">
      <data key="label">MAC</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PII">
      <data key="label">PII</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='early 2018'">
      <data key="label">Entity(text='early 2018'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='early 2017'">
      <data key="label">Entity(text='early 2017'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Worldwide Interbank Financial Telecommunication'">
      <data key="label">Worldwide Interbank Financial Telecommunication'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Registry">
      <data key="label">Registry</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="IP">
      <data key="label">IP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="The United Kingdom National Cyber Security Centre">
      <data key="label">The United Kingdom National Cyber Security Centre</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="UK">
      <data key="label">UK</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China">
      <data key="label">China</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id=">China Chopper">
      <data key="label">>China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id=">China Chopper">
      <data key="label">>China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2869">
      <data key="label">2869</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="United Kingdom National Cyber Security Centre'">
      <data key="label">United Kingdom National Cyber Security Centre'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=7491">
      <data key="label">end_char=7491</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="the United Kingdom National Cyber Security Centre'">
      <data key="label">the United Kingdom National Cyber Security Centre'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="UK">
      <data key="label">UK</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China">
      <data key="label">China</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='>China Chopper'">
      <data key="label">Entity(text='>China Chopper'</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="summer 2018">
      <data key="label">summer 2018</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="CVE-2017-3066">
      <data key="label">CVE-2017-3066</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Adobe ColdFusion">
      <data key="label">Adobe ColdFusion</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="1327">
      <data key="label">1327</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2018">
      <data key="label">2018</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="summer 2018'">
      <data key="label">summer 2018'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='CVE-2017-3066'">
      <data key="label">Entity(text='CVE-2017-3066'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="ColdFusion">
      <data key="label">ColdFusion</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='second">
      <data key="label">Entity(text='second</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://owasp.org">
      <data key="label">href="https://owasp.org</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Transport Layer Security">
      <data key="label">Transport Layer Security</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="China Chopper">
      <data key="label">China Chopper</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Linux">
      <data key="label">Linux</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows">
      <data key="label">Windows</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://cloud.google.com">
      <data key="label">href="https://cloud.google.com</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Hypertext Preprocessor">
      <data key="label">Hypertext Preprocessor</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PHP">
      <data key="label">PHP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="1543">
      <data key="label">1543</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=11131">
      <data key="label">end_char=11131</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Chopper">
      <data key="label">Chopper</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://cloud.google.com">
      <data key="label">href="https://cloud.google.com</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Preprocessor'">
      <data key="label">Preprocessor'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=12304">
      <data key="label">end_char=12304</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PHP">
      <data key="label">PHP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PHP">
      <data key="label">PHP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2007">
      <data key="label">2007</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Local Security Authority Subsystem Service">
      <data key="label">Local Security Authority Subsystem Service</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="recent years">
      <data key="label">recent years</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="1092">
      <data key="label">1092</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PHP">
      <data key="label">PHP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2007">
      <data key="label">2007</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=12962">
      <data key="label">end_char=12962</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Security Authority Subsystem Service'">
      <data key="label">Security Authority Subsystem Service'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=13436">
      <data key="label">end_char=13436</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell Empire">
      <data key="label">PowerShell Empire</data>
      <data key="type">GPE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Local Area Network">
      <data key="label">Local Area Network</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows XP">
      <data key="label">Windows XP</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2003">
      <data key="label">2003</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell">
      <data key="label">PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Invoke-Mimikatz">
      <data key="label">Invoke-Mimikatz</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="several years">
      <data key="label">several years</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2011">
      <data key="label">2011</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="DigiNotar">
      <data key="label">DigiNotar</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="a month">
      <data key="label">a month</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="NotPetya">
      <data key="label">NotPetya</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="BadRabbit">
      <data key="label">BadRabbit</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2017">
      <data key="label">2017</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows 8.1/Server">
      <data key="label">Windows 8.1/Server</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://support.microsoft.com">
      <data key="label">href="https://support.microsoft.com</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2014-93434251-04ac">
      <data key="label">2014-93434251-04ac</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="target="_blank">
      <data key="label">target="_blank</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="May 13">
      <data key="label">May 13</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Credential Guard.</p>\n">
      <data key="label">Credential Guard.</p>\n</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id=">Credential Guard">
      <data key="label">>Credential Guard</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows Hardware Compatibility Program Specifications">
      <data key="label">Windows Hardware Compatibility Program Specifications</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2016">
      <data key="label">2016</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows Server Semi-Annual">
      <data key="label">Windows Server Semi-Annual</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="li">
      <data key="label">li</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://learn.microsoft.com">
      <data key="label">href="https://learn.microsoft.com</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows 10">
      <data key="label">Windows 10</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows">
      <data key="label">Windows</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="4769">
      <data key="label">4769</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=14141">
      <data key="label">end_char=14141</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=14305">
      <data key="label">end_char=14305</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='PowerShell Empire'">
      <data key="label">Entity(text='PowerShell Empire'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Area Network'">
      <data key="label">Area Network'</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=14911">
      <data key="label">end_char=14911</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="XP">
      <data key="label">XP</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2003">
      <data key="label">2003</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='PowerShell">
      <data key="label">Entity(text='PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell">
      <data key="label">PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Invoke-Mimikatz'">
      <data key="label">Invoke-Mimikatz'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="several year'">
      <data key="label">several year'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=15614">
      <data key="label">end_char=15614</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=15736">
      <data key="label">end_char=15736</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='NotPetya">
      <data key="label">Entity(text='NotPetya</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="NotPetya">
      <data key="label">NotPetya</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=15962">
      <data key="label">end_char=15962</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="BadRabbit">
      <data key="label">BadRabbit</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2017">
      <data key="label">2017</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=16742, confidence=1.0, metadata={'extraction_method">
      <data key="label">end_char=16742, confidence=1.0, metadata={'extraction_method</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://support.microsoft.com">
      <data key="label">href="https://support.microsoft.com</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2014-93434251-04ac'">
      <data key="label">2014-93434251-04ac'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="May 13'">
      <data key="label">May 13'</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="label='LAW">
      <data key="label">label='LAW</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Credential Guard.</p>\n">
      <data key="label">Credential Guard.</p>\n</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=17635">
      <data key="label">end_char=17635</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Hardware Compatibility Program Specifications'">
      <data key="label">Hardware Compatibility Program Specifications'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows Hardware Compatibility Program Specifications'">
      <data key="label">Windows Hardware Compatibility Program Specifications'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='2016'">
      <data key="label">Entity(text='2016'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="2016">
      <data key="label">2016</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Server Semi-Annual'">
      <data key="label">Server Semi-Annual'</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=17759">
      <data key="label">end_char=17759</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=17817">
      <data key="label">end_char=17817</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=17919">
      <data key="label">end_char=17919</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="href="https://learn.microsoft.com">
      <data key="label">href="https://learn.microsoft.com</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=18149">
      <data key="label">end_char=18149</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Local Administrator Password Solution">
      <data key="label">Local Administrator Password Solution</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Windows">
      <data key="label">Windows</data>
      <data key="type">LOC</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft Advanced Threat Analytics">
      <data key="label">Microsoft Advanced Threat Analytics</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Numerous Mimikatz">
      <data key="label">Numerous Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Wherever Mimikatz">
      <data key="label">Wherever Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="1546">
      <data key="label">1546</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Password Solution'">
      <data key="label">Password Solution'</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft">
      <data key="label">Microsoft</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Advanced Threat Analytics'">
      <data key="label">Advanced Threat Analytics'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=18856">
      <data key="label">end_char=18856</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Microsoft Advanced Threat Analytics'">
      <data key="label">Microsoft Advanced Threat Analytics'</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="start_char=18999">
      <data key="label">start_char=18999</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=19016">
      <data key="label">end_char=19016</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=19540">
      <data key="label">end_char=19540</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Active Directory">
      <data key="label">Active Directory</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Securing Active">
      <data key="label">Securing Active</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell">
      <data key="label">PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id=">Lateral Movement Framework">
      <data key="label">>Lateral Movement Framework</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell">
      <data key="label">PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="1133">
      <data key="label">1133</data>
      <data key="type">DATE</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Directory">
      <data key="label">Directory</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Entity(text='PowerShell">
      <data key="label">Entity(text='PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=20611">
      <data key="label">end_char=20611</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="confidence=1.0">
      <data key="label">confidence=1.0</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="PowerShell">
      <data key="label">PowerShell</data>
      <data key="type">ORG</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="end_char=20690">
      <data key="label">end_char=20690</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>
    <node id="Mimikatz">
      <data key="label">Mimikatz</data>
      <data key="type">PERSON</data>
      <data key="confidence">1.0</data>
    </node>

    <edge source="Australia" target="Canada">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Australia" target="New Zealand">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Australia" target="the United Kingdom">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Australia" target="United States.[1][2][3][4][5]</p>\n">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Canada" target="New Zealand">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Canada" target="the United Kingdom">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Canada" target="United States.[1][2][3][4][5]</p>\n">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="New Zealand" target="the United Kingdom">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="New Zealand" target="United States.[1][2][3][4][5]</p>\n">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="the United Kingdom" target="United States.[1][2][3][4][5]</p>\n">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="li>Webshell" target="China">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Australia" target="Entity(text='Canada">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Australia" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='Canada" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Canada">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Entity(text='New Zealand'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Canada" target="Entity(text='New Zealand'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="New Zealand'" target="Entity(text='the United Kingdom'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="New Zealand'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='the United Kingdom'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="the United Kingdom'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=482" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=482" target="China">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="China">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="May 2015" target="Frutas">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Advanced Persistent Threat" target="APT">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Advanced Persistent Threat" target="Quasar">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="APT" target="Quasar">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="early 2017" target="Society for Worldwide Interbank Financial Telecommunication">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Registry" target="Task">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Registry" target="li>Significant">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Task" target="li>Significant">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Frutas" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='MAC" target="end_char=4752">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=4752" target="MAC">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="PII" target="Entity(text='early 2018'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="PII" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='early 2018'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Entity(text='early 2017'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Worldwide Interbank Financial Telecommunication'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="The United Kingdom National Cyber Security Centre" target="UK">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source=">China Chopper" target="China Chopper">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="China Chopper" target="China Chopper">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2869" target="United Kingdom National Cyber Security Centre'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="United Kingdom National Cyber Security Centre'" target="end_char=7491">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=7491" target="the United Kingdom National Cyber Security Centre'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="the United Kingdom National Cyber Security Centre'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="UK">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="China" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Chopper" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Entity(text='>China Chopper'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="summer 2018" target="CVE-2017-3066">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="CVE-2017-3066" target="Adobe ColdFusion">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="1327" target="2018">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="summer 2018'" target="Entity(text='CVE-2017-3066'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="href="https://owasp.org" target="China Chopper">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Transport Layer Security" target="China Chopper">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Linux" target="Windows">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Linux" target="href="https://cloud.google.com">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows" target="href="https://cloud.google.com">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Hypertext Preprocessor" target="PHP">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=11131" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="href="https://cloud.google.com" target="Preprocessor'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=12304" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=12304" target="PHP">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="PHP">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="recent years">
      <data key="label">use</data>
      <data key="confidence">0.8</data>
    </edge>
    <edge source="Mimikatz" target="PowerShell Empire">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Local Area Network" target="Windows XP">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Local Area Network" target="2003">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows XP" target="2003">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Invoke-Mimikatz" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="several years" target="2011">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="DigiNotar" target="a month">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="a month" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="NotPetya">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="BadRabbit">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="NotPetya" target="BadRabbit">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="NotPetya" target="2017">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="BadRabbit" target="2017">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2014-93434251-04ac" target="target="_blank">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="target="_blank" target="May 13">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Credential Guard.</p>\n" target=">Credential Guard">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Credential Guard.</p>\n" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Credential Guard.</p>\n" target="Windows Hardware Compatibility Program Specifications">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source=">Credential Guard" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source=">Credential Guard" target="Windows Hardware Compatibility Program Specifications">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="Windows Hardware Compatibility Program Specifications">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="2016">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="Windows Server Semi-Annual">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Hardware Compatibility Program Specifications" target="2016">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Hardware Compatibility Program Specifications" target="Windows Server Semi-Annual">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Hardware Compatibility Program Specifications" target="li">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2016" target="Windows Server Semi-Annual">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2016" target="li">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Server Semi-Annual" target="li">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="href="https://learn.microsoft.com">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows 10" target="Windows">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="end_char=14141">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=14141" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="end_char=14305">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=14305" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Entity(text='PowerShell Empire'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Area Network'" target="end_char=14911">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Area Network'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=14911" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="XP" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="2003">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Entity(text='PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Invoke-Mimikatz'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="several year'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="several year'" target="end_char=15614">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="several year'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=15614" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=15736" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Entity(text='NotPetya">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='NotPetya" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="NotPetya">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="NotPetya" target="end_char=15962">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=15962" target="BadRabbit">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="end_char=16742, confidence=1.0, metadata={'extraction_method">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=16742, confidence=1.0, metadata={'extraction_method" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="May 13'" target="label='LAW">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="May 13'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="label='LAW" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Credential Guard.</p>\n">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Credential Guard.</p>\n" target="end_char=17635">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=17635" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft" target="Hardware Compatibility Program Specifications'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows Hardware Compatibility Program Specifications'" target="Entity(text='2016'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2016" target="Server Semi-Annual'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2016" target="end_char=17759">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="2016" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Server Semi-Annual'" target="end_char=17759">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Server Semi-Annual'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=17759" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=17919" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=17919" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="href="https://learn.microsoft.com" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=18149" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Local Administrator Password Solution" target="Microsoft">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Windows" target="Microsoft Advanced Threat Analytics">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Wherever Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="1546" target="Password Solution'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Password Solution'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Advanced Threat Analytics'" target="end_char=18856">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=18856" target="Microsoft Advanced Threat Analytics'">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft Advanced Threat Analytics'" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft Advanced Threat Analytics'" target="start_char=18999">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft Advanced Threat Analytics'" target="end_char=19016">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Microsoft Advanced Threat Analytics'" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="start_char=18999">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="end_char=19016">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="start_char=18999" target="end_char=19016">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="start_char=18999" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=19016" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="end_char=19540">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=19540" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Securing Active" target="PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="PowerShell" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source=">Lateral Movement Framework" target="PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Mimikatz" target="Directory">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='PowerShell" target="end_char=20611">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="Entity(text='PowerShell" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=20611" target="confidence=1.0">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=20611" target="PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="confidence=1.0" target="PowerShell">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="PowerShell" target="end_char=20690">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
    <edge source="end_char=20690" target="Mimikatz">
      <data key="label">related_to</data>
      <data key="confidence">0.6</data>
    </edge>
  </graph>
</graphml>