confidence,id,metadata,source_id,target_id,type
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Australia,Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",Australia,New Zealand,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 23}",Australia,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",Australia,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Canada,New Zealand,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 15}",Canada,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 43}",Canada,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",New Zealand,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",New Zealand,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",the United Kingdom,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",li>Webshell,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Australia,Entity(text='Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 70}",Australia,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 46}",Entity(text='Canada,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",confidence=1.0,Entity(text='New Zealand',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Canada,Entity(text='New Zealand',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",New Zealand',Entity(text='the United Kingdom',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 81}",New Zealand',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 45}",Entity(text='the United Kingdom',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,the United Kingdom',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=482,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=482,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 85}",May 2015,Frutas,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Advanced Persistent Threat,APT,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 86}",Advanced Persistent Threat,Quasar,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 81}",APT,Quasar,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 89}",early 2017,Society for Worldwide Interbank Financial Telecommunication,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 11}",Windows Registry,Task,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 32}",Windows Registry,li>Significant,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 17}",Task,li>Significant,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 79}",Frutas,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Entity(text='MAC,end_char=4752,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=4752,MAC,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",PII,Entity(text='early 2018',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 77}",PII,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 48}",Entity(text='early 2018',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 91}",confidence=1.0,Entity(text='early 2017',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 47}",Worldwide Interbank Financial Telecommunication',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",The United Kingdom National Cyber Security Centre,UK,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",>China Chopper,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 52}",China Chopper,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 52}",2869,United Kingdom National Cyber Security Centre',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 32}",United Kingdom National Cyber Security Centre',end_char=7491,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=7491,the United Kingdom National Cyber Security Centre',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 67}",the United Kingdom National Cyber Security Centre',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,UK,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 79}",China,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",Chopper,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",confidence=1.0,Entity(text='>China Chopper',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 90}",summer 2018,CVE-2017-3066,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 90}",CVE-2017-3066,Adobe ColdFusion,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 54}",1327,2018,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",summer 2018',Entity(text='CVE-2017-3066',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 93}","href=""https://owasp.org",China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 97}",Transport Layer Security,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Linux,Windows,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 42}",Linux,"href=""https://cloud.google.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",Windows,"href=""https://cloud.google.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Hypertext Preprocessor,PHP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=11131,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 28}","href=""https://cloud.google.com",Preprocessor',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=12304,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=12304,PHP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,PHP,related_to
0.8,,"{""extraction_method"": ""dependency"", ""dependency_path"": ""ROOT -> ... -> pobj""}",Mimikatz,recent years,use
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",Mimikatz,PowerShell Empire,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Local Area Network,Windows XP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 84}",Local Area Network,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Windows XP,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 40}",Mimikatz,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 21}",Invoke-Mimikatz,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",several years,2011,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",DigiNotar,a month,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 44}",a month,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 59}",Mimikatz,NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Mimikatz,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",NotPetya,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",NotPetya,2017,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 23}",BadRabbit,2017,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Microsoft,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",Mimikatz,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 25}",2014-93434251-04ac,"target=""_blank",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 95}","target=""_blank",May 13,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Credential Guard.</p>\n,>Credential Guard,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 85}",Credential Guard.</p>\n,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 97}",Credential Guard.</p>\n,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 66}",>Credential Guard,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",>Credential Guard,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 3}",Microsoft,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 89}",Microsoft,2016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 98}",Microsoft,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Windows Hardware Compatibility Program Specifications,2016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 42}",Windows Hardware Compatibility Program Specifications,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 88}",Windows Hardware Compatibility Program Specifications,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",2016,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",2016,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 20}",Windows Server Semi-Annual,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 6}",Microsoft,"href=""https://learn.microsoft.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Windows 10,Windows,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",Mimikatz,end_char=14141,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=14141,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",Mimikatz,end_char=14305,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=14305,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='PowerShell Empire',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Area Network',end_char=14911,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Area Network',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=14911,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",XP,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",Invoke-Mimikatz',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",Mimikatz,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,several year',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 56}",several year',end_char=15614,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",several year',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=15614,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=15736,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",Entity(text='NotPetya,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 61}",NotPetya,end_char=15962,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=15962,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 61}",Mimikatz,"end_char=16742, confidence=1.0, metadata={'extraction_method",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 46}","end_char=16742, confidence=1.0, metadata={'extraction_method",Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",May 13',label='LAW,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 77}",May 13',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",label='LAW,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Credential Guard.</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 80}",Credential Guard.</p>\n,end_char=17635,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=17635,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",Microsoft,Hardware Compatibility Program Specifications',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",Windows Hardware Compatibility Program Specifications',Entity(text='2016',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",2016,Server Semi-Annual',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",2016,end_char=17759,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 94}",2016,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Server Semi-Annual',end_char=17759,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Server Semi-Annual',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=17759,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=17919,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=17919,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}","href=""https://learn.microsoft.com",confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=18149,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 6}",Local Administrator Password Solution,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 16}",Windows,Microsoft Advanced Threat Analytics,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 68}",Mimikatz,Wherever Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 68}",1546,Password Solution',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Password Solution',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Advanced Threat Analytics',end_char=18856,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=18856,Microsoft Advanced Threat Analytics',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",Microsoft Advanced Threat Analytics',Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 53}",Microsoft Advanced Threat Analytics',start_char=18999,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 71}",Microsoft Advanced Threat Analytics',end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",Microsoft Advanced Threat Analytics',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 19}",Mimikatz,start_char=18999,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",Mimikatz,end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",start_char=18999,end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 18}",start_char=18999,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=19016,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 27}",Mimikatz,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Mimikatz,end_char=19540,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=19540,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 91}",Securing Active,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 71}",PowerShell,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",>Lateral Movement Framework,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 25}",Mimikatz,Directory,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 34}",Entity(text='PowerShell,end_char=20611,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",Entity(text='PowerShell,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=20611,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=20611,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",PowerShell,end_char=20690,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=20690,Mimikatz,related_to
