{
  "entities": [
    {
      "id": "Chunk(text='<div>\\n",
      "name": "Chunk(text='<div>\\n",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "chunk(text='<div>\\n"
      }
    },
    {
      "id": "Australia",
      "name": "Australia",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Australia"
      }
    },
    {
      "id": "Canada",
      "name": "Canada",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Canada"
      }
    },
    {
      "id": "New Zealand",
      "name": "New Zealand",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "New Zealand"
      }
    },
    {
      "id": "the United Kingdom",
      "name": "the United Kingdom",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "the United Kingdom"
      }
    },
    {
      "id": "United States.[1][2][3][4][5]</p>\\n",
      "name": "United States.[1][2][3][4][5]</p>\\n",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "United States.[1][2][3][4][5]</p>\\n"
      }
    },
    {
      "id": "li>Webshell",
      "name": "li>Webshell",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "li>Webshell"
      }
    },
    {
      "id": "China",
      "name": "China",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China"
      }
    },
    {
      "id": "li>C2 Obfuscation",
      "name": "li>C2 Obfuscation",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "li>C2 Obfuscation"
      }
    },
    {
      "id": "Australia",
      "name": "Australia",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Australia"
      }
    },
    {
      "id": "Entity(text='Canada",
      "name": "Entity(text='Canada",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='Canada"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Canada",
      "name": "Canada",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Canada"
      }
    },
    {
      "id": "Entity(text='New Zealand'",
      "name": "Entity(text='New Zealand'",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='New Zealand'"
      }
    },
    {
      "id": "New Zealand'",
      "name": "New Zealand'",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "New Zealand'"
      }
    },
    {
      "id": "Entity(text='the United Kingdom'",
      "name": "Entity(text='the United Kingdom'",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "entity(text='the United Kingdom'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "the United Kingdom'",
      "name": "the United Kingdom'",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "the United Kingdom'"
      }
    },
    {
      "id": "end_char=482",
      "name": "end_char=482",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=482"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "China",
      "name": "China",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China"
      }
    },
    {
      "id": "Today",
      "name": "Today",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "today"
      }
    },
    {
      "id": "today",
      "name": "today",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "today"
      }
    },
    {
      "id": "May 2015",
      "name": "May 2015",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "May 2015"
      }
    },
    {
      "id": "Frutas",
      "name": "Frutas",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Frutas"
      }
    },
    {
      "id": "Wireshark",
      "name": "Wireshark",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Wireshark"
      }
    },
    {
      "id": "Advanced Persistent Threat",
      "name": "Advanced Persistent Threat",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Advanced Persistent Threat"
      }
    },
    {
      "id": "APT",
      "name": "APT",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "APT"
      }
    },
    {
      "id": "Quasar",
      "name": "Quasar",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Quasar"
      }
    },
    {
      "id": "Java",
      "name": "Java",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Java"
      }
    },
    {
      "id": "MAC",
      "name": "MAC",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "MAC"
      }
    },
    {
      "id": "PII",
      "name": "PII",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PII"
      }
    },
    {
      "id": "early 2018",
      "name": "early 2018",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "early 2018"
      }
    },
    {
      "id": "early 2017",
      "name": "early 2017",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "early 2017"
      }
    },
    {
      "id": "Society for Worldwide Interbank Financial Telecommunication",
      "name": "Society for Worldwide Interbank Financial Telecommunication",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Society for Worldwide Interbank Financial Telecommunication"
      }
    },
    {
      "id": "Windows Registry",
      "name": "Windows Registry",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows Registry"
      }
    },
    {
      "id": "Task",
      "name": "Task",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Task"
      }
    },
    {
      "id": "li>Significant",
      "name": "li>Significant",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "li>significant"
      }
    },
    {
      "id": "IP",
      "name": "IP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "IP"
      }
    },
    {
      "id": "end_char=2514",
      "name": "end_char=2514",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=2514"
      }
    },
    {
      "id": "Entity(text='May 2015'",
      "name": "Entity(text='May 2015'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='May 2015'"
      }
    },
    {
      "id": "May 2015'",
      "name": "May 2015'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "May 2015'"
      }
    },
    {
      "id": "Frutas",
      "name": "Frutas",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "fruta"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "end_char=4132",
      "name": "end_char=4132",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=4132"
      }
    },
    {
      "id": "APT",
      "name": "APT",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "APT"
      }
    },
    {
      "id": "Quasar",
      "name": "Quasar",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Quasar"
      }
    },
    {
      "id": "Java",
      "name": "Java",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Java"
      }
    },
    {
      "id": "Entity(text='MAC",
      "name": "Entity(text='MAC",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='MAC"
      }
    },
    {
      "id": "end_char=4752",
      "name": "end_char=4752",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=4752"
      }
    },
    {
      "id": "MAC",
      "name": "MAC",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "MAC"
      }
    },
    {
      "id": "PII",
      "name": "PII",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PII"
      }
    },
    {
      "id": "Entity(text='early 2018'",
      "name": "Entity(text='early 2018'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "entity(text='early 2018'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Entity(text='early 2017'",
      "name": "Entity(text='early 2017'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "entity(text='early 2017'"
      }
    },
    {
      "id": "Worldwide Interbank Financial Telecommunication'",
      "name": "Worldwide Interbank Financial Telecommunication'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Worldwide Interbank Financial Telecommunication'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Registry",
      "name": "Registry",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Registry"
      }
    },
    {
      "id": "IP",
      "name": "IP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "IP"
      }
    },
    {
      "id": "The United Kingdom National Cyber Security Centre",
      "name": "The United Kingdom National Cyber Security Centre",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "the United Kingdom National Cyber Security Centre"
      }
    },
    {
      "id": "UK",
      "name": "UK",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "UK"
      }
    },
    {
      "id": "China",
      "name": "China",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China"
      }
    },
    {
      "id": ">China Chopper",
      "name": ">China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": ">China Chopper"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": ">China Chopper",
      "name": ">China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": ">China Chopper"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "2869",
      "name": "2869",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2869"
      }
    },
    {
      "id": "United Kingdom National Cyber Security Centre'",
      "name": "United Kingdom National Cyber Security Centre'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "United Kingdom National Cyber Security Centre'"
      }
    },
    {
      "id": "end_char=7491",
      "name": "end_char=7491",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=7491"
      }
    },
    {
      "id": "the United Kingdom National Cyber Security Centre'",
      "name": "the United Kingdom National Cyber Security Centre'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "the United Kingdom National Cyber Security Centre'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "UK",
      "name": "UK",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "UK"
      }
    },
    {
      "id": "China",
      "name": "China",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Entity(text='>China Chopper'",
      "name": "Entity(text='>China Chopper'",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='>China Chopper'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "summer 2018",
      "name": "summer 2018",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "summer 2018"
      }
    },
    {
      "id": "CVE-2017-3066",
      "name": "CVE-2017-3066",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "CVE-2017-3066"
      }
    },
    {
      "id": "Adobe ColdFusion",
      "name": "Adobe ColdFusion",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Adobe ColdFusion"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "1327",
      "name": "1327",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "1327"
      }
    },
    {
      "id": "2018",
      "name": "2018",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2018"
      }
    },
    {
      "id": "summer 2018'",
      "name": "summer 2018'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "summer 2018'"
      }
    },
    {
      "id": "Entity(text='CVE-2017-3066'",
      "name": "Entity(text='CVE-2017-3066'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='CVE-2017-3066'"
      }
    },
    {
      "id": "ColdFusion",
      "name": "ColdFusion",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "ColdFusion"
      }
    },
    {
      "id": "Entity(text='second",
      "name": "Entity(text='second",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='second"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "href=\"https://owasp.org",
      "name": "href=\"https://owasp.org",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://owasp.org"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "Transport Layer Security",
      "name": "Transport Layer Security",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Transport Layer Security"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "China Chopper",
      "name": "China Chopper",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "China Chopper"
      }
    },
    {
      "id": "Linux",
      "name": "Linux",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Linux"
      }
    },
    {
      "id": "Windows",
      "name": "Windows",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows"
      }
    },
    {
      "id": "href=\"https://cloud.google.com",
      "name": "href=\"https://cloud.google.com",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://cloud.google.com"
      }
    },
    {
      "id": "Hypertext Preprocessor",
      "name": "Hypertext Preprocessor",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Hypertext Preprocessor"
      }
    },
    {
      "id": "PHP",
      "name": "PHP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PHP"
      }
    },
    {
      "id": "1543",
      "name": "1543",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "1543"
      }
    },
    {
      "id": "end_char=11131",
      "name": "end_char=11131",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=11131"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "Chopper",
      "name": "Chopper",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Chopper"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "href=\"https://cloud.google.com",
      "name": "href=\"https://cloud.google.com",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://cloud.google.com"
      }
    },
    {
      "id": "Preprocessor'",
      "name": "Preprocessor'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Preprocessor'"
      }
    },
    {
      "id": "end_char=12304",
      "name": "end_char=12304",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=12304"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "PHP",
      "name": "PHP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PHP"
      }
    },
    {
      "id": "PHP",
      "name": "PHP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PHP"
      }
    },
    {
      "id": "2007",
      "name": "2007",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2007"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Local Security Authority Subsystem Service",
      "name": "Local Security Authority Subsystem Service",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Local Security Authority Subsystem Service"
      }
    },
    {
      "id": "recent years",
      "name": "recent years",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "recent year"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "1092",
      "name": "1092",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "1092"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "PHP",
      "name": "PHP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PHP"
      }
    },
    {
      "id": "2007",
      "name": "2007",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2007"
      }
    },
    {
      "id": "end_char=12962",
      "name": "end_char=12962",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=12962"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Security Authority Subsystem Service'",
      "name": "Security Authority Subsystem Service'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Security Authority Subsystem Service'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "end_char=13436",
      "name": "end_char=13436",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=13436"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "PowerShell Empire",
      "name": "PowerShell Empire",
      "type": "GPE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell Empire"
      }
    },
    {
      "id": "Local Area Network",
      "name": "Local Area Network",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Local Area Network"
      }
    },
    {
      "id": "Windows XP",
      "name": "Windows XP",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows XP"
      }
    },
    {
      "id": "2003",
      "name": "2003",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2003"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "PowerShell",
      "name": "PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell"
      }
    },
    {
      "id": "Invoke-Mimikatz",
      "name": "Invoke-Mimikatz",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Invoke-Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "several years",
      "name": "several years",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "several year"
      }
    },
    {
      "id": "2011",
      "name": "2011",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2011"
      }
    },
    {
      "id": "DigiNotar",
      "name": "DigiNotar",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "DigiNotar"
      }
    },
    {
      "id": "a month",
      "name": "a month",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "a month"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "NotPetya",
      "name": "NotPetya",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "NotPetya"
      }
    },
    {
      "id": "BadRabbit",
      "name": "BadRabbit",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "BadRabbit"
      }
    },
    {
      "id": "2017",
      "name": "2017",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2017"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Windows 8.1/Server",
      "name": "Windows 8.1/Server",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows 8.1/Server"
      }
    },
    {
      "id": "href=\"https://support.microsoft.com",
      "name": "href=\"https://support.microsoft.com",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://support.microsoft.com"
      }
    },
    {
      "id": "2014-93434251-04ac",
      "name": "2014-93434251-04ac",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2014-93434251-04ac"
      }
    },
    {
      "id": "target=\"_blank",
      "name": "target=\"_blank",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "target=\"_blank"
      }
    },
    {
      "id": "May 13",
      "name": "May 13",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "May 13"
      }
    },
    {
      "id": "Credential Guard.</p>\\n",
      "name": "Credential Guard.</p>\\n",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Credential Guard.</p>\\n"
      }
    },
    {
      "id": ">Credential Guard",
      "name": ">Credential Guard",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": ">Credential Guard"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Windows Hardware Compatibility Program Specifications",
      "name": "Windows Hardware Compatibility Program Specifications",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows Hardware Compatibility Program Specifications"
      }
    },
    {
      "id": "2016",
      "name": "2016",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2016"
      }
    },
    {
      "id": "Windows Server Semi-Annual",
      "name": "Windows Server Semi-Annual",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows Server Semi-annual"
      }
    },
    {
      "id": "li",
      "name": "li",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "li"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "href=\"https://learn.microsoft.com",
      "name": "href=\"https://learn.microsoft.com",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://learn.microsoft.com"
      }
    },
    {
      "id": "Windows 10",
      "name": "Windows 10",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows 10"
      }
    },
    {
      "id": "Windows",
      "name": "Windows",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows"
      }
    },
    {
      "id": "4769",
      "name": "4769",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "4769"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "end_char=14141",
      "name": "end_char=14141",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=14141"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "end_char=14305",
      "name": "end_char=14305",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=14305"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Entity(text='PowerShell Empire'",
      "name": "Entity(text='PowerShell Empire'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='PowerShell Empire'"
      }
    },
    {
      "id": "Area Network'",
      "name": "Area Network'",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Area Network'"
      }
    },
    {
      "id": "end_char=14911",
      "name": "end_char=14911",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=14911"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "XP",
      "name": "XP",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "XP"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "2003",
      "name": "2003",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2003"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Entity(text='PowerShell",
      "name": "Entity(text='PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='PowerShell"
      }
    },
    {
      "id": "PowerShell",
      "name": "PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell"
      }
    },
    {
      "id": "Invoke-Mimikatz'",
      "name": "Invoke-Mimikatz'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Invoke-Mimikatz'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "several year'",
      "name": "several year'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "several year'"
      }
    },
    {
      "id": "end_char=15614",
      "name": "end_char=15614",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=15614"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "end_char=15736",
      "name": "end_char=15736",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=15736"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Entity(text='NotPetya",
      "name": "Entity(text='NotPetya",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='NotPetya"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "NotPetya",
      "name": "NotPetya",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "NotPetya"
      }
    },
    {
      "id": "end_char=15962",
      "name": "end_char=15962",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=15962"
      }
    },
    {
      "id": "BadRabbit",
      "name": "BadRabbit",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "BadRabbit"
      }
    },
    {
      "id": "2017",
      "name": "2017",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2017"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "end_char=16742, confidence=1.0, metadata={'extraction_method",
      "name": "end_char=16742, confidence=1.0, metadata={'extraction_method",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=16742, confidence=1.0, metadata={'extraction_method"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "href=\"https://support.microsoft.com",
      "name": "href=\"https://support.microsoft.com",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://support.microsoft.com"
      }
    },
    {
      "id": "2014-93434251-04ac'",
      "name": "2014-93434251-04ac'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2014-93434251-04ac'"
      }
    },
    {
      "id": "May 13'",
      "name": "May 13'",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "May 13'"
      }
    },
    {
      "id": "label='LAW",
      "name": "label='LAW",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "label='law"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Credential Guard.</p>\\n",
      "name": "Credential Guard.</p>\\n",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "credential guard.</p>\\n"
      }
    },
    {
      "id": "end_char=17635",
      "name": "end_char=17635",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=17635"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Hardware Compatibility Program Specifications'",
      "name": "Hardware Compatibility Program Specifications'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Hardware Compatibility Program Specifications'"
      }
    },
    {
      "id": "Windows Hardware Compatibility Program Specifications'",
      "name": "Windows Hardware Compatibility Program Specifications'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows Hardware Compatibility Program Specifications'"
      }
    },
    {
      "id": "Entity(text='2016'",
      "name": "Entity(text='2016'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='2016'"
      }
    },
    {
      "id": "2016",
      "name": "2016",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "2016"
      }
    },
    {
      "id": "Server Semi-Annual'",
      "name": "Server Semi-Annual'",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Server Semi-annual'"
      }
    },
    {
      "id": "end_char=17759",
      "name": "end_char=17759",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=17759"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "end_char=17817",
      "name": "end_char=17817",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=17817"
      }
    },
    {
      "id": "end_char=17919",
      "name": "end_char=17919",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=17919"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "href=\"https://learn.microsoft.com",
      "name": "href=\"https://learn.microsoft.com",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "href=\"https://learn.microsoft.com"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "end_char=18149",
      "name": "end_char=18149",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=18149"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Local Administrator Password Solution",
      "name": "Local Administrator Password Solution",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Local Administrator Password Solution"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Windows",
      "name": "Windows",
      "type": "LOC",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Windows"
      }
    },
    {
      "id": "Microsoft Advanced Threat Analytics",
      "name": "Microsoft Advanced Threat Analytics",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft Advanced Threat Analytics"
      }
    },
    {
      "id": "Numerous Mimikatz",
      "name": "Numerous Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Numerous Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Wherever Mimikatz",
      "name": "Wherever Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "wherever Mimikatz"
      }
    },
    {
      "id": "1546",
      "name": "1546",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "1546"
      }
    },
    {
      "id": "Password Solution'",
      "name": "Password Solution'",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Password Solution'"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Microsoft",
      "name": "Microsoft",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft"
      }
    },
    {
      "id": "Advanced Threat Analytics'",
      "name": "Advanced Threat Analytics'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Advanced Threat Analytics'"
      }
    },
    {
      "id": "end_char=18856",
      "name": "end_char=18856",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=18856"
      }
    },
    {
      "id": "Microsoft Advanced Threat Analytics'",
      "name": "Microsoft Advanced Threat Analytics'",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Microsoft Advanced Threat Analytics'"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "start_char=18999",
      "name": "start_char=18999",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "start_char=18999"
      }
    },
    {
      "id": "end_char=19016",
      "name": "end_char=19016",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=19016"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "end_char=19540",
      "name": "end_char=19540",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=19540"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Active Directory",
      "name": "Active Directory",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Active Directory"
      }
    },
    {
      "id": "Securing Active",
      "name": "Securing Active",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Securing Active"
      }
    },
    {
      "id": "PowerShell",
      "name": "PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": ">Lateral Movement Framework",
      "name": ">Lateral Movement Framework",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": ">Lateral Movement Framework"
      }
    },
    {
      "id": "PowerShell",
      "name": "PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell"
      }
    },
    {
      "id": "1133",
      "name": "1133",
      "type": "DATE",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "1133"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    },
    {
      "id": "Directory",
      "name": "Directory",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Directory"
      }
    },
    {
      "id": "Entity(text='PowerShell",
      "name": "Entity(text='PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Entity(text='PowerShell"
      }
    },
    {
      "id": "end_char=20611",
      "name": "end_char=20611",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=20611"
      }
    },
    {
      "id": "confidence=1.0",
      "name": "confidence=1.0",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "confidence=1.0"
      }
    },
    {
      "id": "PowerShell",
      "name": "PowerShell",
      "type": "ORG",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "PowerShell"
      }
    },
    {
      "id": "end_char=20690",
      "name": "end_char=20690",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "end_char=20690"
      }
    },
    {
      "id": "Mimikatz",
      "name": "Mimikatz",
      "type": "PERSON",
      "confidence": 1.0,
      "metadata": {
        "extraction_method": "ml",
        "model": "en_core_web_sm",
        "lemma": "Mimikatz"
      }
    }
  ],
  "relationships": [
    {
      "source": "Australia",
      "target": "Canada",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Australia",
      "target": "New Zealand",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 10
      }
    },
    {
      "source": "Australia",
      "target": "the United Kingdom",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 23
      }
    },
    {
      "source": "Australia",
      "target": "United States.[1][2][3][4][5]</p>\\n",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 51
      }
    },
    {
      "source": "Canada",
      "target": "New Zealand",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Canada",
      "target": "the United Kingdom",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 15
      }
    },
    {
      "source": "Canada",
      "target": "United States.[1][2][3][4][5]</p>\\n",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 43
      }
    },
    {
      "source": "New Zealand",
      "target": "the United Kingdom",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "New Zealand",
      "target": "United States.[1][2][3][4][5]</p>\\n",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 30
      }
    },
    {
      "source": "the United Kingdom",
      "target": "United States.[1][2][3][4][5]</p>\\n",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 10
      }
    },
    {
      "source": "li>Webshell",
      "target": "China",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Australia",
      "target": "Entity(text='Canada",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Australia",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 70
      }
    },
    {
      "source": "Entity(text='Canada",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 46
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Canada",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Entity(text='New Zealand'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 87
      }
    },
    {
      "source": "Canada",
      "target": "Entity(text='New Zealand'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "New Zealand'",
      "target": "Entity(text='the United Kingdom'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 4
      }
    },
    {
      "source": "New Zealand'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 81
      }
    },
    {
      "source": "Entity(text='the United Kingdom'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 45
      }
    },
    {
      "source": "confidence=1.0",
      "target": "the United Kingdom'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "end_char=482",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=482",
      "target": "China",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "confidence=1.0",
      "target": "China",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "May 2015",
      "target": "Frutas",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 85
      }
    },
    {
      "source": "Advanced Persistent Threat",
      "target": "APT",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Advanced Persistent Threat",
      "target": "Quasar",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 86
      }
    },
    {
      "source": "APT",
      "target": "Quasar",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 81
      }
    },
    {
      "source": "early 2017",
      "target": "Society for Worldwide Interbank Financial Telecommunication",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 89
      }
    },
    {
      "source": "Windows Registry",
      "target": "Task",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 11
      }
    },
    {
      "source": "Windows Registry",
      "target": "li>Significant",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 32
      }
    },
    {
      "source": "Task",
      "target": "li>Significant",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 17
      }
    },
    {
      "source": "Frutas",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 79
      }
    },
    {
      "source": "Entity(text='MAC",
      "target": "end_char=4752",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "end_char=4752",
      "target": "MAC",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "PII",
      "target": "Entity(text='early 2018'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "PII",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 77
      }
    },
    {
      "source": "Entity(text='early 2018'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 48
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Entity(text='early 2017'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 91
      }
    },
    {
      "source": "Worldwide Interbank Financial Telecommunication'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 47
      }
    },
    {
      "source": "The United Kingdom National Cyber Security Centre",
      "target": "UK",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": ">China Chopper",
      "target": "China Chopper",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 30
      }
    },
    {
      "source": "China Chopper",
      "target": "China Chopper",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 52
      }
    },
    {
      "source": "2869",
      "target": "United Kingdom National Cyber Security Centre'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 52
      }
    },
    {
      "source": "United Kingdom National Cyber Security Centre'",
      "target": "end_char=7491",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 32
      }
    },
    {
      "source": "end_char=7491",
      "target": "the United Kingdom National Cyber Security Centre'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "the United Kingdom National Cyber Security Centre'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 67
      }
    },
    {
      "source": "confidence=1.0",
      "target": "UK",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "China",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 79
      }
    },
    {
      "source": "Chopper",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 51
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Entity(text='>China Chopper'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 82
      }
    },
    {
      "source": "summer 2018",
      "target": "CVE-2017-3066",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 90
      }
    },
    {
      "source": "CVE-2017-3066",
      "target": "Adobe ColdFusion",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 90
      }
    },
    {
      "source": "1327",
      "target": "2018",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 54
      }
    },
    {
      "source": "summer 2018'",
      "target": "Entity(text='CVE-2017-3066'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 4
      }
    },
    {
      "source": "href=\"https://owasp.org",
      "target": "China Chopper",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 93
      }
    },
    {
      "source": "Transport Layer Security",
      "target": "China Chopper",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 97
      }
    },
    {
      "source": "Linux",
      "target": "Windows",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Linux",
      "target": "href=\"https://cloud.google.com",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 42
      }
    },
    {
      "source": "Windows",
      "target": "href=\"https://cloud.google.com",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 30
      }
    },
    {
      "source": "Hypertext Preprocessor",
      "target": "PHP",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=11131",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "href=\"https://cloud.google.com",
      "target": "Preprocessor'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 28
      }
    },
    {
      "source": "end_char=12304",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=12304",
      "target": "PHP",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "confidence=1.0",
      "target": "PHP",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "Mimikatz",
      "target": "recent years",
      "type": "use",
      "confidence": 0.8,
      "metadata": {
        "extraction_method": "dependency",
        "dependency_path": "ROOT -> ... -> pobj"
      }
    },
    {
      "source": "Mimikatz",
      "target": "PowerShell Empire",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 82
      }
    },
    {
      "source": "Local Area Network",
      "target": "Windows XP",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 72
      }
    },
    {
      "source": "Local Area Network",
      "target": "2003",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 84
      }
    },
    {
      "source": "Windows XP",
      "target": "2003",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Mimikatz",
      "target": "PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 40
      }
    },
    {
      "source": "Invoke-Mimikatz",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 21
      }
    },
    {
      "source": "several years",
      "target": "2011",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "DigiNotar",
      "target": "a month",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 87
      }
    },
    {
      "source": "a month",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 44
      }
    },
    {
      "source": "Mimikatz",
      "target": "NotPetya",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 59
      }
    },
    {
      "source": "Mimikatz",
      "target": "BadRabbit",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 72
      }
    },
    {
      "source": "NotPetya",
      "target": "BadRabbit",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "NotPetya",
      "target": "2017",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 37
      }
    },
    {
      "source": "BadRabbit",
      "target": "2017",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 23
      }
    },
    {
      "source": "Microsoft",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "Mimikatz",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 10
      }
    },
    {
      "source": "2014-93434251-04ac",
      "target": "target=\"_blank",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 25
      }
    },
    {
      "source": "target=\"_blank",
      "target": "May 13",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 95
      }
    },
    {
      "source": "Credential Guard.</p>\\n",
      "target": ">Credential Guard",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Credential Guard.</p>\\n",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 85
      }
    },
    {
      "source": "Credential Guard.</p>\\n",
      "target": "Windows Hardware Compatibility Program Specifications",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 97
      }
    },
    {
      "source": ">Credential Guard",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 66
      }
    },
    {
      "source": ">Credential Guard",
      "target": "Windows Hardware Compatibility Program Specifications",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 78
      }
    },
    {
      "source": "Microsoft",
      "target": "Windows Hardware Compatibility Program Specifications",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 3
      }
    },
    {
      "source": "Microsoft",
      "target": "2016",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 89
      }
    },
    {
      "source": "Microsoft",
      "target": "Windows Server Semi-Annual",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 98
      }
    },
    {
      "source": "Windows Hardware Compatibility Program Specifications",
      "target": "2016",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "Windows Hardware Compatibility Program Specifications",
      "target": "Windows Server Semi-Annual",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 42
      }
    },
    {
      "source": "Windows Hardware Compatibility Program Specifications",
      "target": "li",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 88
      }
    },
    {
      "source": "2016",
      "target": "Windows Server Semi-Annual",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "2016",
      "target": "li",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 51
      }
    },
    {
      "source": "Windows Server Semi-Annual",
      "target": "li",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 20
      }
    },
    {
      "source": "Microsoft",
      "target": "href=\"https://learn.microsoft.com",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 6
      }
    },
    {
      "source": "Windows 10",
      "target": "Windows",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Mimikatz",
      "target": "end_char=14141",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 63
      }
    },
    {
      "source": "end_char=14141",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "Mimikatz",
      "target": "end_char=14305",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 63
      }
    },
    {
      "source": "end_char=14305",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "Mimikatz",
      "target": "Entity(text='PowerShell Empire'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Area Network'",
      "target": "end_char=14911",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "Area Network'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 49
      }
    },
    {
      "source": "end_char=14911",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "XP",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 50
      }
    },
    {
      "source": "confidence=1.0",
      "target": "2003",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "Mimikatz",
      "target": "Entity(text='PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Invoke-Mimikatz'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 78
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "Mimikatz",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 82
      }
    },
    {
      "source": "confidence=1.0",
      "target": "several year'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "several year'",
      "target": "end_char=15614",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 56
      }
    },
    {
      "source": "several year'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 72
      }
    },
    {
      "source": "end_char=15614",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=15736",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Mimikatz",
      "target": "Entity(text='NotPetya",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 5
      }
    },
    {
      "source": "Entity(text='NotPetya",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 50
      }
    },
    {
      "source": "confidence=1.0",
      "target": "NotPetya",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "NotPetya",
      "target": "end_char=15962",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 61
      }
    },
    {
      "source": "end_char=15962",
      "target": "BadRabbit",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "Mimikatz",
      "target": "end_char=16742, confidence=1.0, metadata={'extraction_method",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 61
      }
    },
    {
      "source": "end_char=16742, confidence=1.0, metadata={'extraction_method",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 46
      }
    },
    {
      "source": "May 13'",
      "target": "label='LAW",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 30
      }
    },
    {
      "source": "May 13'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 77
      }
    },
    {
      "source": "label='LAW",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 37
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Credential Guard.</p>\\n",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "Credential Guard.</p>\\n",
      "target": "end_char=17635",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 80
      }
    },
    {
      "source": "end_char=17635",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "Microsoft",
      "target": "Hardware Compatibility Program Specifications'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 26
      }
    },
    {
      "source": "Windows Hardware Compatibility Program Specifications'",
      "target": "Entity(text='2016'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 4
      }
    },
    {
      "source": "2016",
      "target": "Server Semi-Annual'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 26
      }
    },
    {
      "source": "2016",
      "target": "end_char=17759",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 78
      }
    },
    {
      "source": "2016",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 94
      }
    },
    {
      "source": "Server Semi-Annual'",
      "target": "end_char=17759",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "Server Semi-Annual'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 49
      }
    },
    {
      "source": "end_char=17759",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=17919",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=17919",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "confidence=1.0",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "href=\"https://learn.microsoft.com",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 78
      }
    },
    {
      "source": "end_char=18149",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Local Administrator Password Solution",
      "target": "Microsoft",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 6
      }
    },
    {
      "source": "Windows",
      "target": "Microsoft Advanced Threat Analytics",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 16
      }
    },
    {
      "source": "Mimikatz",
      "target": "Wherever Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 68
      }
    },
    {
      "source": "1546",
      "target": "Password Solution'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 68
      }
    },
    {
      "source": "Password Solution'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 49
      }
    },
    {
      "source": "Advanced Threat Analytics'",
      "target": "end_char=18856",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 33
      }
    },
    {
      "source": "end_char=18856",
      "target": "Microsoft Advanced Threat Analytics'",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "Microsoft Advanced Threat Analytics'",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 26
      }
    },
    {
      "source": "Microsoft Advanced Threat Analytics'",
      "target": "start_char=18999",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 53
      }
    },
    {
      "source": "Microsoft Advanced Threat Analytics'",
      "target": "end_char=19016",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 71
      }
    },
    {
      "source": "Microsoft Advanced Threat Analytics'",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 87
      }
    },
    {
      "source": "Mimikatz",
      "target": "start_char=18999",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 19
      }
    },
    {
      "source": "Mimikatz",
      "target": "end_char=19016",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 37
      }
    },
    {
      "source": "start_char=18999",
      "target": "end_char=19016",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "start_char=18999",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 18
      }
    },
    {
      "source": "end_char=19016",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Mimikatz",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 27
      }
    },
    {
      "source": "Mimikatz",
      "target": "end_char=19540",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 72
      }
    },
    {
      "source": "end_char=19540",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Securing Active",
      "target": "PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 91
      }
    },
    {
      "source": "PowerShell",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 71
      }
    },
    {
      "source": ">Lateral Movement Framework",
      "target": "PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "Mimikatz",
      "target": "Directory",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 25
      }
    },
    {
      "source": "Entity(text='PowerShell",
      "target": "end_char=20611",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 34
      }
    },
    {
      "source": "Entity(text='PowerShell",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 50
      }
    },
    {
      "source": "end_char=20611",
      "target": "confidence=1.0",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 2
      }
    },
    {
      "source": "end_char=20611",
      "target": "PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    },
    {
      "source": "confidence=1.0",
      "target": "PowerShell",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 76
      }
    },
    {
      "source": "PowerShell",
      "target": "end_char=20690",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 63
      }
    },
    {
      "source": "end_char=20690",
      "target": "Mimikatz",
      "type": "related_to",
      "confidence": 0.6,
      "metadata": {
        "extraction_method": "co_occurrence",
        "distance": 92
      }
    }
  ],
  "nodes": [],
  "edges": [],
  "metadata": {
    "exported_at": "2025-12-30T18:16:22.478658",
    "num_entities": 289,
    "num_relationships": 176,
    "temporal_enabled": false,
    "timestamp": "2025-12-30T16:55:17.999740",
    "entity_resolution_applied": false,
    "format": "json"
  }
}