mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-08-29 04:26:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Refactor Criminal Network Analysis notebook: simplify code, use Semantica modules effectively, add interactive visualization, fix GraphRAG queries

Browse Source
This commit is contained in:
KaifAhmad1
2025-12-30 18:19:57 +05:30
parent f4016237bd
commit d8f78cd49e
5 changed files with 15359 additions and 305 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cookbook/use_cases/intelligence/01_Criminal_Network_Analysis.ipynb
+7773 -305
View File
File diff suppressed because it is too large Load Diff
cookbook/use_cases/intelligence/criminal_network.graphml
+2163
View File
File diff suppressed because it is too large Load Diff
cookbook/use_cases/intelligence/criminal_network.json
+4956
View File
File diff suppressed because it is too large Load Diff
cookbook/use_cases/intelligence/criminal_network_entities.csv
+290
View File
@@ -0,0 +1,290 @@
confidence,end,id,metadata,start,text,type
1.0,,Chunk(text='<div>\n,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""chunk(text='<div>\\n""}",,Chunk(text='<div>\n,DATE
1.0,,Australia,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Australia""}",,Australia,GPE
1.0,,Canada,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Canada""}",,Canada,GPE
1.0,,New Zealand,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""New Zealand""}",,New Zealand,GPE
1.0,,the United Kingdom,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""the United Kingdom""}",,the United Kingdom,GPE
1.0,,United States.[1][2][3][4][5]</p>\n,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""United States.[1][2][3][4][5]</p>\\n""}",,United States.[1][2][3][4][5]</p>\n,ORG
1.0,,li>Webshell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""li>Webshell""}",,li>Webshell,PERSON
1.0,,China,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China""}",,China,GPE
1.0,,li>C2 Obfuscation,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""li>C2 Obfuscation""}",,li>C2 Obfuscation,PERSON
1.0,,Australia,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Australia""}",,Australia,GPE
1.0,,Entity(text='Canada,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='Canada""}",,Entity(text='Canada,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Canada,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Canada""}",,Canada,GPE
1.0,,Entity(text='New Zealand',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='New Zealand'""}",,Entity(text='New Zealand',GPE
1.0,,New Zealand',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""New Zealand'""}",,New Zealand',GPE
1.0,,Entity(text='the United Kingdom',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""entity(text='the United Kingdom'""}",,Entity(text='the United Kingdom',GPE
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,the United Kingdom',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""the United Kingdom'""}",,the United Kingdom',GPE
1.0,,end_char=482,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=482""}",,end_char=482,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,China,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China""}",,China,GPE
1.0,,Today,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""today""}",,Today,DATE
1.0,,today,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""today""}",,today,DATE
1.0,,May 2015,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""May 2015""}",,May 2015,DATE
1.0,,Frutas,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Frutas""}",,Frutas,ORG
1.0,,Wireshark,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Wireshark""}",,Wireshark,ORG
1.0,,Advanced Persistent Threat,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Advanced Persistent Threat""}",,Advanced Persistent Threat,ORG
1.0,,APT,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""APT""}",,APT,ORG
1.0,,Quasar,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Quasar""}",,Quasar,PERSON
1.0,,Java,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Java""}",,Java,PERSON
1.0,,MAC,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""MAC""}",,MAC,ORG
1.0,,PII,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PII""}",,PII,ORG
1.0,,early 2018,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""early 2018""}",,early 2018,DATE
1.0,,early 2017,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""early 2017""}",,early 2017,DATE
1.0,,Society for Worldwide Interbank Financial Telecommunication,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Society for Worldwide Interbank Financial Telecommunication""}",,Society for Worldwide Interbank Financial Telecommunication,ORG
1.0,,Windows Registry,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows Registry""}",,Windows Registry,ORG
1.0,,Task,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Task""}",,Task,ORG
1.0,,li>Significant,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""li>significant""}",,li>Significant,PERSON
1.0,,IP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""IP""}",,IP,ORG
1.0,,end_char=2514,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=2514""}",,end_char=2514,ORG
1.0,,Entity(text='May 2015',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='May 2015'""}",,Entity(text='May 2015',DATE
1.0,,May 2015',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""May 2015'""}",,May 2015',DATE
1.0,,Frutas,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""fruta""}",,Frutas,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,end_char=4132,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=4132""}",,end_char=4132,PERSON
1.0,,APT,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""APT""}",,APT,ORG
1.0,,Quasar,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Quasar""}",,Quasar,PERSON
1.0,,Java,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Java""}",,Java,PERSON
1.0,,Entity(text='MAC,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='MAC""}",,Entity(text='MAC,ORG
1.0,,end_char=4752,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=4752""}",,end_char=4752,PERSON
1.0,,MAC,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""MAC""}",,MAC,ORG
1.0,,PII,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PII""}",,PII,PERSON
1.0,,Entity(text='early 2018',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""entity(text='early 2018'""}",,Entity(text='early 2018',DATE
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Entity(text='early 2017',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""entity(text='early 2017'""}",,Entity(text='early 2017',DATE
1.0,,Worldwide Interbank Financial Telecommunication',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Worldwide Interbank Financial Telecommunication'""}",,Worldwide Interbank Financial Telecommunication',ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Registry,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Registry""}",,Registry,ORG
1.0,,IP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""IP""}",,IP,ORG
1.0,,The United Kingdom National Cyber Security Centre,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""the United Kingdom National Cyber Security Centre""}",,The United Kingdom National Cyber Security Centre,ORG
1.0,,UK,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""UK""}",,UK,GPE
1.0,,China,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China""}",,China,GPE
1.0,,>China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": "">China Chopper""}",,>China Chopper,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,PERSON
1.0,,>China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": "">China Chopper""}",,>China Chopper,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,2869,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2869""}",,2869,DATE
1.0,,United Kingdom National Cyber Security Centre',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""United Kingdom National Cyber Security Centre'""}",,United Kingdom National Cyber Security Centre',ORG
1.0,,end_char=7491,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=7491""}",,end_char=7491,PERSON
1.0,,the United Kingdom National Cyber Security Centre',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""the United Kingdom National Cyber Security Centre'""}",,the United Kingdom National Cyber Security Centre',ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,UK,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""UK""}",,UK,GPE
1.0,,China,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China""}",,China,GPE
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Entity(text='>China Chopper',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='>China Chopper'""}",,Entity(text='>China Chopper',PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,summer 2018,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""summer 2018""}",,summer 2018,DATE
1.0,,CVE-2017-3066,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""CVE-2017-3066""}",,CVE-2017-3066,ORG
1.0,,Adobe ColdFusion,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Adobe ColdFusion""}",,Adobe ColdFusion,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,1327,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""1327""}",,1327,DATE
1.0,,2018,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2018""}",,2018,DATE
1.0,,summer 2018',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""summer 2018'""}",,summer 2018',DATE
1.0,,Entity(text='CVE-2017-3066',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='CVE-2017-3066'""}",,Entity(text='CVE-2017-3066',DATE
1.0,,ColdFusion,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""ColdFusion""}",,ColdFusion,ORG
1.0,,Entity(text='second,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='second""}",,Entity(text='second,PERSON
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,"href=""https://owasp.org","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://owasp.org""}",,"href=""https://owasp.org",ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,Transport Layer Security,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Transport Layer Security""}",,Transport Layer Security,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,China Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""China Chopper""}",,China Chopper,ORG
1.0,,Linux,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Linux""}",,Linux,PERSON
1.0,,Windows,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows""}",,Windows,LOC
1.0,,"href=""https://cloud.google.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://cloud.google.com""}",,"href=""https://cloud.google.com",ORG
1.0,,Hypertext Preprocessor,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Hypertext Preprocessor""}",,Hypertext Preprocessor,PERSON
1.0,,PHP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PHP""}",,PHP,ORG
1.0,,1543,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""1543""}",,1543,DATE
1.0,,end_char=11131,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=11131""}",,end_char=11131,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,Chopper,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Chopper""}",,Chopper,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,"href=""https://cloud.google.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://cloud.google.com""}",,"href=""https://cloud.google.com",ORG
1.0,,Preprocessor',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Preprocessor'""}",,Preprocessor',ORG
1.0,,end_char=12304,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=12304""}",,end_char=12304,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,PHP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PHP""}",,PHP,ORG
1.0,,PHP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PHP""}",,PHP,ORG
1.0,,2007,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2007""}",,2007,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Local Security Authority Subsystem Service,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Local Security Authority Subsystem Service""}",,Local Security Authority Subsystem Service,ORG
1.0,,recent years,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""recent year""}",,recent years,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,1092,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""1092""}",,1092,DATE
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,PHP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PHP""}",,PHP,ORG
1.0,,2007,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2007""}",,2007,DATE
1.0,,end_char=12962,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=12962""}",,end_char=12962,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Security Authority Subsystem Service',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Security Authority Subsystem Service'""}",,Security Authority Subsystem Service',ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,end_char=13436,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=13436""}",,end_char=13436,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,PowerShell Empire,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell Empire""}",,PowerShell Empire,GPE
1.0,,Local Area Network,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Local Area Network""}",,Local Area Network,ORG
1.0,,Windows XP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows XP""}",,Windows XP,LOC
1.0,,2003,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2003""}",,2003,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell""}",,PowerShell,ORG
1.0,,Invoke-Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Invoke-Mimikatz""}",,Invoke-Mimikatz,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,several years,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""several year""}",,several years,DATE
1.0,,2011,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2011""}",,2011,DATE
1.0,,DigiNotar,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""DigiNotar""}",,DigiNotar,ORG
1.0,,a month,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""a month""}",,a month,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,NotPetya,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""NotPetya""}",,NotPetya,ORG
1.0,,BadRabbit,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""BadRabbit""}",,BadRabbit,ORG
1.0,,2017,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2017""}",,2017,DATE
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Windows 8.1/Server,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows 8.1/Server""}",,Windows 8.1/Server,ORG
1.0,,"href=""https://support.microsoft.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://support.microsoft.com""}",,"href=""https://support.microsoft.com",ORG
1.0,,2014-93434251-04ac,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2014-93434251-04ac""}",,2014-93434251-04ac,DATE
1.0,,"target=""_blank","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""target=\""_blank""}",,"target=""_blank",PERSON
1.0,,May 13,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""May 13""}",,May 13,DATE
1.0,,Credential Guard.</p>\n,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Credential Guard.</p>\\n""}",,Credential Guard.</p>\n,ORG
1.0,,>Credential Guard,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": "">Credential Guard""}",,>Credential Guard,ORG
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Windows Hardware Compatibility Program Specifications,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows Hardware Compatibility Program Specifications""}",,Windows Hardware Compatibility Program Specifications,ORG
1.0,,2016,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2016""}",,2016,DATE
1.0,,Windows Server Semi-Annual,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows Server Semi-annual""}",,Windows Server Semi-Annual,LOC
1.0,,li,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""li""}",,li,PERSON
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,"href=""https://learn.microsoft.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://learn.microsoft.com""}",,"href=""https://learn.microsoft.com",ORG
1.0,,Windows 10,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows 10""}",,Windows 10,LOC
1.0,,Windows,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows""}",,Windows,LOC
1.0,,4769,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""4769""}",,4769,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,end_char=14141,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=14141""}",,end_char=14141,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,end_char=14305,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=14305""}",,end_char=14305,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Entity(text='PowerShell Empire',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='PowerShell Empire'""}",,Entity(text='PowerShell Empire',ORG
1.0,,Area Network',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Area Network'""}",,Area Network',PERSON
1.0,,end_char=14911,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=14911""}",,end_char=14911,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,XP,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""XP""}",,XP,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,2003,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2003""}",,2003,DATE
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Entity(text='PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='PowerShell""}",,Entity(text='PowerShell,ORG
1.0,,PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell""}",,PowerShell,ORG
1.0,,Invoke-Mimikatz',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Invoke-Mimikatz'""}",,Invoke-Mimikatz',ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,several year',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""several year'""}",,several year',DATE
1.0,,end_char=15614,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=15614""}",,end_char=15614,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,end_char=15736,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=15736""}",,end_char=15736,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Entity(text='NotPetya,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='NotPetya""}",,Entity(text='NotPetya,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,NotPetya,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""NotPetya""}",,NotPetya,ORG
1.0,,end_char=15962,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=15962""}",,end_char=15962,PERSON
1.0,,BadRabbit,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""BadRabbit""}",,BadRabbit,ORG
1.0,,2017,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2017""}",,2017,DATE
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,"end_char=16742, confidence=1.0, metadata={'extraction_method","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=16742, confidence=1.0, metadata={'extraction_method""}",,"end_char=16742, confidence=1.0, metadata={'extraction_method",ORG
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,"href=""https://support.microsoft.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://support.microsoft.com""}",,"href=""https://support.microsoft.com",ORG
1.0,,2014-93434251-04ac',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2014-93434251-04ac'""}",,2014-93434251-04ac',DATE
1.0,,May 13',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""May 13'""}",,May 13',DATE
1.0,,label='LAW,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""label='law""}",,label='LAW,PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Credential Guard.</p>\n,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""credential guard.</p>\\n""}",,Credential Guard.</p>\n,ORG
1.0,,end_char=17635,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=17635""}",,end_char=17635,PERSON
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Hardware Compatibility Program Specifications',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Hardware Compatibility Program Specifications'""}",,Hardware Compatibility Program Specifications',ORG
1.0,,Windows Hardware Compatibility Program Specifications',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows Hardware Compatibility Program Specifications'""}",,Windows Hardware Compatibility Program Specifications',ORG
1.0,,Entity(text='2016',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='2016'""}",,Entity(text='2016',ORG
1.0,,2016,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""2016""}",,2016,DATE
1.0,,Server Semi-Annual',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Server Semi-annual'""}",,Server Semi-Annual',PERSON
1.0,,end_char=17759,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=17759""}",,end_char=17759,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,end_char=17817,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=17817""}",,end_char=17817,ORG
1.0,,end_char=17919,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=17919""}",,end_char=17919,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,"href=""https://learn.microsoft.com","{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""href=\""https://learn.microsoft.com""}",,"href=""https://learn.microsoft.com",PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,end_char=18149,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=18149""}",,end_char=18149,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Local Administrator Password Solution,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Local Administrator Password Solution""}",,Local Administrator Password Solution,ORG
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Windows,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Windows""}",,Windows,LOC
1.0,,Microsoft Advanced Threat Analytics,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft Advanced Threat Analytics""}",,Microsoft Advanced Threat Analytics,ORG
1.0,,Numerous Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Numerous Mimikatz""}",,Numerous Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Wherever Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""wherever Mimikatz""}",,Wherever Mimikatz,PERSON
1.0,,1546,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""1546""}",,1546,DATE
1.0,,Password Solution',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Password Solution'""}",,Password Solution',PERSON
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Microsoft,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft""}",,Microsoft,ORG
1.0,,Advanced Threat Analytics',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Advanced Threat Analytics'""}",,Advanced Threat Analytics',ORG
1.0,,end_char=18856,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=18856""}",,end_char=18856,DATE
1.0,,Microsoft Advanced Threat Analytics',"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Microsoft Advanced Threat Analytics'""}",,Microsoft Advanced Threat Analytics',ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,start_char=18999,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""start_char=18999""}",,start_char=18999,ORG
1.0,,end_char=19016,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=19016""}",,end_char=19016,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,end_char=19540,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=19540""}",,end_char=19540,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Active Directory,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Active Directory""}",,Active Directory,PERSON
1.0,,Securing Active,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Securing Active""}",,Securing Active,ORG
1.0,,PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell""}",,PowerShell,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,>Lateral Movement Framework,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": "">Lateral Movement Framework""}",,>Lateral Movement Framework,ORG
1.0,,PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell""}",,PowerShell,ORG
1.0,,1133,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""1133""}",,1133,DATE
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1.0,,Directory,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Directory""}",,Directory,ORG
1.0,,Entity(text='PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Entity(text='PowerShell""}",,Entity(text='PowerShell,ORG
1.0,,end_char=20611,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=20611""}",,end_char=20611,ORG
1.0,,confidence=1.0,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""confidence=1.0""}",,confidence=1.0,ORG
1.0,,PowerShell,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""PowerShell""}",,PowerShell,ORG
1.0,,end_char=20690,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""end_char=20690""}",,end_char=20690,PERSON
1.0,,Mimikatz,"{""extraction_method"": ""ml"", ""model"": ""en_core_web_sm"", ""lemma"": ""Mimikatz""}",,Mimikatz,PERSON
1 confidence end id metadata start text type
2 1.0 Chunk(text='<div>\n {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "chunk(text='<div>\\n"} Chunk(text='<div>\n DATE
3 1.0 Australia {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Australia"} Australia GPE
4 1.0 Canada {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Canada"} Canada GPE
5 1.0 New Zealand {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "New Zealand"} New Zealand GPE
6 1.0 the United Kingdom {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "the United Kingdom"} the United Kingdom GPE
7 1.0 United States.[1][2][3][4][5]</p>\n {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "United States.[1][2][3][4][5]</p>\\n"} United States.[1][2][3][4][5]</p>\n ORG
8 1.0 li>Webshell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "li>Webshell"} li>Webshell PERSON
9 1.0 China {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China"} China GPE
10 1.0 li>C2 Obfuscation {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "li>C2 Obfuscation"} li>C2 Obfuscation PERSON
11 1.0 Australia {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Australia"} Australia GPE
12 1.0 Entity(text='Canada {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='Canada"} Entity(text='Canada ORG
13 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
14 1.0 Canada {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Canada"} Canada GPE
15 1.0 Entity(text='New Zealand' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='New Zealand'"} Entity(text='New Zealand' GPE
16 1.0 New Zealand' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "New Zealand'"} New Zealand' GPE
17 1.0 Entity(text='the United Kingdom' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "entity(text='the United Kingdom'"} Entity(text='the United Kingdom' GPE
18 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
19 1.0 the United Kingdom' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "the United Kingdom'"} the United Kingdom' GPE
20 1.0 end_char=482 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=482"} end_char=482 PERSON
21 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
22 1.0 China {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China"} China GPE
23 1.0 Today {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "today"} Today DATE
24 1.0 today {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "today"} today DATE
25 1.0 May 2015 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "May 2015"} May 2015 DATE
26 1.0 Frutas {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Frutas"} Frutas ORG
27 1.0 Wireshark {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Wireshark"} Wireshark ORG
28 1.0 Advanced Persistent Threat {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Advanced Persistent Threat"} Advanced Persistent Threat ORG
29 1.0 APT {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "APT"} APT ORG
30 1.0 Quasar {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Quasar"} Quasar PERSON
31 1.0 Java {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Java"} Java PERSON
32 1.0 MAC {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "MAC"} MAC ORG
33 1.0 PII {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PII"} PII ORG
34 1.0 early 2018 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "early 2018"} early 2018 DATE
35 1.0 early 2017 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "early 2017"} early 2017 DATE
36 1.0 Society for Worldwide Interbank Financial Telecommunication {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Society for Worldwide Interbank Financial Telecommunication"} Society for Worldwide Interbank Financial Telecommunication ORG
37 1.0 Windows Registry {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows Registry"} Windows Registry ORG
38 1.0 Task {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Task"} Task ORG
39 1.0 li>Significant {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "li>significant"} li>Significant PERSON
40 1.0 IP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "IP"} IP ORG
41 1.0 end_char=2514 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=2514"} end_char=2514 ORG
42 1.0 Entity(text='May 2015' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='May 2015'"} Entity(text='May 2015' DATE
43 1.0 May 2015' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "May 2015'"} May 2015' DATE
44 1.0 Frutas {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "fruta"} Frutas ORG
45 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
46 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
47 1.0 end_char=4132 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=4132"} end_char=4132 PERSON
48 1.0 APT {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "APT"} APT ORG
49 1.0 Quasar {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Quasar"} Quasar PERSON
50 1.0 Java {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Java"} Java PERSON
51 1.0 Entity(text='MAC {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='MAC"} Entity(text='MAC ORG
52 1.0 end_char=4752 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=4752"} end_char=4752 PERSON
53 1.0 MAC {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "MAC"} MAC ORG
54 1.0 PII {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PII"} PII PERSON
55 1.0 Entity(text='early 2018' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "entity(text='early 2018'"} Entity(text='early 2018' DATE
56 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
57 1.0 Entity(text='early 2017' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "entity(text='early 2017'"} Entity(text='early 2017' DATE
58 1.0 Worldwide Interbank Financial Telecommunication' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Worldwide Interbank Financial Telecommunication'"} Worldwide Interbank Financial Telecommunication' ORG
59 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
60 1.0 Registry {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Registry"} Registry ORG
61 1.0 IP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "IP"} IP ORG
62 1.0 The United Kingdom National Cyber Security Centre {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "the United Kingdom National Cyber Security Centre"} The United Kingdom National Cyber Security Centre ORG
63 1.0 UK {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "UK"} UK GPE
64 1.0 China {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China"} China GPE
65 1.0 >China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": ">China Chopper"} >China Chopper ORG
66 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper PERSON
67 1.0 >China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": ">China Chopper"} >China Chopper ORG
68 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
69 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
70 1.0 2869 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2869"} 2869 DATE
71 1.0 United Kingdom National Cyber Security Centre' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "United Kingdom National Cyber Security Centre'"} United Kingdom National Cyber Security Centre' ORG
72 1.0 end_char=7491 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=7491"} end_char=7491 PERSON
73 1.0 the United Kingdom National Cyber Security Centre' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "the United Kingdom National Cyber Security Centre'"} the United Kingdom National Cyber Security Centre' ORG
74 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
75 1.0 UK {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "UK"} UK GPE
76 1.0 China {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China"} China GPE
77 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
78 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
79 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
80 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
81 1.0 Entity(text='>China Chopper' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='>China Chopper'"} Entity(text='>China Chopper' PERSON
82 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
83 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
84 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
85 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
86 1.0 summer 2018 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "summer 2018"} summer 2018 DATE
87 1.0 CVE-2017-3066 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "CVE-2017-3066"} CVE-2017-3066 ORG
88 1.0 Adobe ColdFusion {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Adobe ColdFusion"} Adobe ColdFusion ORG
89 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
90 1.0 1327 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "1327"} 1327 DATE
91 1.0 2018 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2018"} 2018 DATE
92 1.0 summer 2018' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "summer 2018'"} summer 2018' DATE
93 1.0 Entity(text='CVE-2017-3066' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='CVE-2017-3066'"} Entity(text='CVE-2017-3066' DATE
94 1.0 ColdFusion {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "ColdFusion"} ColdFusion ORG
95 1.0 Entity(text='second {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='second"} Entity(text='second PERSON
96 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
97 1.0 href="https://owasp.org {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://owasp.org"} href="https://owasp.org ORG
98 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
99 1.0 Transport Layer Security {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Transport Layer Security"} Transport Layer Security ORG
100 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
101 1.0 China Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "China Chopper"} China Chopper ORG
102 1.0 Linux {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Linux"} Linux PERSON
103 1.0 Windows {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows"} Windows LOC
104 1.0 href="https://cloud.google.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://cloud.google.com"} href="https://cloud.google.com ORG
105 1.0 Hypertext Preprocessor {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Hypertext Preprocessor"} Hypertext Preprocessor PERSON
106 1.0 PHP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PHP"} PHP ORG
107 1.0 1543 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "1543"} 1543 DATE
108 1.0 end_char=11131 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=11131"} end_char=11131 ORG
109 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
110 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
111 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
112 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
113 1.0 Chopper {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Chopper"} Chopper PERSON
114 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
115 1.0 href="https://cloud.google.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://cloud.google.com"} href="https://cloud.google.com ORG
116 1.0 Preprocessor' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Preprocessor'"} Preprocessor' ORG
117 1.0 end_char=12304 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=12304"} end_char=12304 ORG
118 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
119 1.0 PHP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PHP"} PHP ORG
120 1.0 PHP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PHP"} PHP ORG
121 1.0 2007 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2007"} 2007 DATE
122 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
123 1.0 Local Security Authority Subsystem Service {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Local Security Authority Subsystem Service"} Local Security Authority Subsystem Service ORG
124 1.0 recent years {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "recent year"} recent years DATE
125 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
126 1.0 1092 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "1092"} 1092 DATE
127 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
128 1.0 PHP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PHP"} PHP ORG
129 1.0 2007 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2007"} 2007 DATE
130 1.0 end_char=12962 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=12962"} end_char=12962 PERSON
131 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
132 1.0 Security Authority Subsystem Service' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Security Authority Subsystem Service'"} Security Authority Subsystem Service' ORG
133 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
134 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
135 1.0 end_char=13436 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=13436"} end_char=13436 PERSON
136 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
137 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
138 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
139 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
140 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
141 1.0 PowerShell Empire {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell Empire"} PowerShell Empire GPE
142 1.0 Local Area Network {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Local Area Network"} Local Area Network ORG
143 1.0 Windows XP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows XP"} Windows XP LOC
144 1.0 2003 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2003"} 2003 DATE
145 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
146 1.0 PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell"} PowerShell ORG
147 1.0 Invoke-Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Invoke-Mimikatz"} Invoke-Mimikatz ORG
148 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
149 1.0 several years {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "several year"} several years DATE
150 1.0 2011 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2011"} 2011 DATE
151 1.0 DigiNotar {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "DigiNotar"} DigiNotar ORG
152 1.0 a month {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "a month"} a month DATE
153 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
154 1.0 NotPetya {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "NotPetya"} NotPetya ORG
155 1.0 BadRabbit {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "BadRabbit"} BadRabbit ORG
156 1.0 2017 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2017"} 2017 DATE
157 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
158 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
159 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
160 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
161 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
162 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
163 1.0 Windows 8.1/Server {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows 8.1/Server"} Windows 8.1/Server ORG
164 1.0 href="https://support.microsoft.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://support.microsoft.com"} href="https://support.microsoft.com ORG
165 1.0 2014-93434251-04ac {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2014-93434251-04ac"} 2014-93434251-04ac DATE
166 1.0 target="_blank {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "target=\"_blank"} target="_blank PERSON
167 1.0 May 13 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "May 13"} May 13 DATE
168 1.0 Credential Guard.</p>\n {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Credential Guard.</p>\\n"} Credential Guard.</p>\n ORG
169 1.0 >Credential Guard {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": ">Credential Guard"} >Credential Guard ORG
170 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
171 1.0 Windows Hardware Compatibility Program Specifications {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows Hardware Compatibility Program Specifications"} Windows Hardware Compatibility Program Specifications ORG
172 1.0 2016 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2016"} 2016 DATE
173 1.0 Windows Server Semi-Annual {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows Server Semi-annual"} Windows Server Semi-Annual LOC
174 1.0 li {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "li"} li PERSON
175 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
176 1.0 href="https://learn.microsoft.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://learn.microsoft.com"} href="https://learn.microsoft.com ORG
177 1.0 Windows 10 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows 10"} Windows 10 LOC
178 1.0 Windows {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows"} Windows LOC
179 1.0 4769 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "4769"} 4769 DATE
180 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
181 1.0 end_char=14141 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=14141"} end_char=14141 ORG
182 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
183 1.0 end_char=14305 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=14305"} end_char=14305 PERSON
184 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
185 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
186 1.0 Entity(text='PowerShell Empire' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='PowerShell Empire'"} Entity(text='PowerShell Empire' ORG
187 1.0 Area Network' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Area Network'"} Area Network' PERSON
188 1.0 end_char=14911 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=14911"} end_char=14911 ORG
189 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
190 1.0 XP {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "XP"} XP ORG
191 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
192 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
193 1.0 2003 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2003"} 2003 DATE
194 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
195 1.0 Entity(text='PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='PowerShell"} Entity(text='PowerShell ORG
196 1.0 PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell"} PowerShell ORG
197 1.0 Invoke-Mimikatz' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Invoke-Mimikatz'"} Invoke-Mimikatz' ORG
198 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
199 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
200 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
201 1.0 several year' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "several year'"} several year' DATE
202 1.0 end_char=15614 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=15614"} end_char=15614 PERSON
203 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
204 1.0 end_char=15736 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=15736"} end_char=15736 PERSON
205 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
206 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
207 1.0 Entity(text='NotPetya {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='NotPetya"} Entity(text='NotPetya PERSON
208 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
209 1.0 NotPetya {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "NotPetya"} NotPetya ORG
210 1.0 end_char=15962 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=15962"} end_char=15962 PERSON
211 1.0 BadRabbit {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "BadRabbit"} BadRabbit ORG
212 1.0 2017 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2017"} 2017 DATE
213 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
214 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
215 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
216 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
217 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
218 1.0 end_char=16742, confidence=1.0, metadata={'extraction_method {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=16742, confidence=1.0, metadata={'extraction_method"} end_char=16742, confidence=1.0, metadata={'extraction_method ORG
219 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
220 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
221 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
222 1.0 href="https://support.microsoft.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://support.microsoft.com"} href="https://support.microsoft.com ORG
223 1.0 2014-93434251-04ac' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2014-93434251-04ac'"} 2014-93434251-04ac' DATE
224 1.0 May 13' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "May 13'"} May 13' DATE
225 1.0 label='LAW {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "label='law"} label='LAW PERSON
226 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
227 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
228 1.0 Credential Guard.</p>\n {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "credential guard.</p>\\n"} Credential Guard.</p>\n ORG
229 1.0 end_char=17635 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=17635"} end_char=17635 PERSON
230 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
231 1.0 Hardware Compatibility Program Specifications' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Hardware Compatibility Program Specifications'"} Hardware Compatibility Program Specifications' ORG
232 1.0 Windows Hardware Compatibility Program Specifications' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows Hardware Compatibility Program Specifications'"} Windows Hardware Compatibility Program Specifications' ORG
233 1.0 Entity(text='2016' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='2016'"} Entity(text='2016' ORG
234 1.0 2016 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "2016"} 2016 DATE
235 1.0 Server Semi-Annual' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Server Semi-annual'"} Server Semi-Annual' PERSON
236 1.0 end_char=17759 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=17759"} end_char=17759 ORG
237 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
238 1.0 end_char=17817 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=17817"} end_char=17817 ORG
239 1.0 end_char=17919 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=17919"} end_char=17919 ORG
240 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
241 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
242 1.0 href="https://learn.microsoft.com {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "href=\"https://learn.microsoft.com"} href="https://learn.microsoft.com PERSON
243 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
244 1.0 end_char=18149 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=18149"} end_char=18149 ORG
245 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
246 1.0 Local Administrator Password Solution {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Local Administrator Password Solution"} Local Administrator Password Solution ORG
247 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
248 1.0 Windows {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Windows"} Windows LOC
249 1.0 Microsoft Advanced Threat Analytics {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft Advanced Threat Analytics"} Microsoft Advanced Threat Analytics ORG
250 1.0 Numerous Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Numerous Mimikatz"} Numerous Mimikatz PERSON
251 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
252 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
253 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
254 1.0 Wherever Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "wherever Mimikatz"} Wherever Mimikatz PERSON
255 1.0 1546 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "1546"} 1546 DATE
256 1.0 Password Solution' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Password Solution'"} Password Solution' PERSON
257 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
258 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
259 1.0 Microsoft {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft"} Microsoft ORG
260 1.0 Advanced Threat Analytics' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Advanced Threat Analytics'"} Advanced Threat Analytics' ORG
261 1.0 end_char=18856 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=18856"} end_char=18856 DATE
262 1.0 Microsoft Advanced Threat Analytics' {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Microsoft Advanced Threat Analytics'"} Microsoft Advanced Threat Analytics' ORG
263 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
264 1.0 start_char=18999 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "start_char=18999"} start_char=18999 ORG
265 1.0 end_char=19016 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=19016"} end_char=19016 ORG
266 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
267 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
268 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
269 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
270 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
271 1.0 end_char=19540 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=19540"} end_char=19540 ORG
272 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
273 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
274 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
275 1.0 Active Directory {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Active Directory"} Active Directory PERSON
276 1.0 Securing Active {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Securing Active"} Securing Active ORG
277 1.0 PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell"} PowerShell ORG
278 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
279 1.0 >Lateral Movement Framework {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": ">Lateral Movement Framework"} >Lateral Movement Framework ORG
280 1.0 PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell"} PowerShell ORG
281 1.0 1133 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "1133"} 1133 DATE
282 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
283 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
284 1.0 Directory {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Directory"} Directory ORG
285 1.0 Entity(text='PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Entity(text='PowerShell"} Entity(text='PowerShell ORG
286 1.0 end_char=20611 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=20611"} end_char=20611 ORG
287 1.0 confidence=1.0 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "confidence=1.0"} confidence=1.0 ORG
288 1.0 PowerShell {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "PowerShell"} PowerShell ORG
289 1.0 end_char=20690 {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "end_char=20690"} end_char=20690 PERSON
290 1.0 Mimikatz {"extraction_method": "ml", "model": "en_core_web_sm", "lemma": "Mimikatz"} Mimikatz PERSON
cookbook/use_cases/intelligence/criminal_network_relationships.csv
+177
View File
@@ -0,0 +1,177 @@
confidence,id,metadata,source_id,target_id,type
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Australia,Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",Australia,New Zealand,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 23}",Australia,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",Australia,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Canada,New Zealand,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 15}",Canada,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 43}",Canada,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",New Zealand,the United Kingdom,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",New Zealand,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",the United Kingdom,United States.[1][2][3][4][5]</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",li>Webshell,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Australia,Entity(text='Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 70}",Australia,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 46}",Entity(text='Canada,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Canada,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",confidence=1.0,Entity(text='New Zealand',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Canada,Entity(text='New Zealand',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",New Zealand',Entity(text='the United Kingdom',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 81}",New Zealand',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 45}",Entity(text='the United Kingdom',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,the United Kingdom',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=482,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=482,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,China,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 85}",May 2015,Frutas,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Advanced Persistent Threat,APT,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 86}",Advanced Persistent Threat,Quasar,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 81}",APT,Quasar,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 89}",early 2017,Society for Worldwide Interbank Financial Telecommunication,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 11}",Windows Registry,Task,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 32}",Windows Registry,li>Significant,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 17}",Task,li>Significant,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 79}",Frutas,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Entity(text='MAC,end_char=4752,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=4752,MAC,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",PII,Entity(text='early 2018',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 77}",PII,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 48}",Entity(text='early 2018',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 91}",confidence=1.0,Entity(text='early 2017',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 47}",Worldwide Interbank Financial Telecommunication',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",The United Kingdom National Cyber Security Centre,UK,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",>China Chopper,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 52}",China Chopper,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 52}",2869,United Kingdom National Cyber Security Centre',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 32}",United Kingdom National Cyber Security Centre',end_char=7491,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=7491,the United Kingdom National Cyber Security Centre',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 67}",the United Kingdom National Cyber Security Centre',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,UK,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 79}",China,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",Chopper,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",confidence=1.0,Entity(text='>China Chopper',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 90}",summer 2018,CVE-2017-3066,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 90}",CVE-2017-3066,Adobe ColdFusion,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 54}",1327,2018,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",summer 2018',Entity(text='CVE-2017-3066',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 93}","href=""https://owasp.org",China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 97}",Transport Layer Security,China Chopper,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Linux,Windows,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 42}",Linux,"href=""https://cloud.google.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",Windows,"href=""https://cloud.google.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Hypertext Preprocessor,PHP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=11131,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 28}","href=""https://cloud.google.com",Preprocessor',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=12304,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=12304,PHP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,PHP,related_to
0.8,,"{""extraction_method"": ""dependency"", ""dependency_path"": ""ROOT -> ... -> pobj""}",Mimikatz,recent years,use
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",Mimikatz,PowerShell Empire,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Local Area Network,Windows XP,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 84}",Local Area Network,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Windows XP,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 40}",Mimikatz,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 21}",Invoke-Mimikatz,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",several years,2011,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",DigiNotar,a month,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 44}",a month,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 59}",Mimikatz,NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Mimikatz,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",NotPetya,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",NotPetya,2017,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 23}",BadRabbit,2017,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Microsoft,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 10}",Mimikatz,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 25}",2014-93434251-04ac,"target=""_blank",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 95}","target=""_blank",May 13,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",Credential Guard.</p>\n,>Credential Guard,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 85}",Credential Guard.</p>\n,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 97}",Credential Guard.</p>\n,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 66}",>Credential Guard,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",>Credential Guard,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 3}",Microsoft,Windows Hardware Compatibility Program Specifications,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 89}",Microsoft,2016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 98}",Microsoft,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Windows Hardware Compatibility Program Specifications,2016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 42}",Windows Hardware Compatibility Program Specifications,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 88}",Windows Hardware Compatibility Program Specifications,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",2016,Windows Server Semi-Annual,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 51}",2016,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 20}",Windows Server Semi-Annual,li,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 6}",Microsoft,"href=""https://learn.microsoft.com",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Windows 10,Windows,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",Mimikatz,end_char=14141,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=14141,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",Mimikatz,end_char=14305,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=14305,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='PowerShell Empire',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Area Network',end_char=14911,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Area Network',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=14911,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",XP,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,2003,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",Invoke-Mimikatz',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 82}",Mimikatz,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,several year',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 56}",several year',end_char=15614,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",several year',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=15614,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=15736,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 5}",Mimikatz,Entity(text='NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",Entity(text='NotPetya,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,NotPetya,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 61}",NotPetya,end_char=15962,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=15962,BadRabbit,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 61}",Mimikatz,"end_char=16742, confidence=1.0, metadata={'extraction_method",related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 46}","end_char=16742, confidence=1.0, metadata={'extraction_method",Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 30}",May 13',label='LAW,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 77}",May 13',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",label='LAW,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Credential Guard.</p>\n,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 80}",Credential Guard.</p>\n,end_char=17635,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=17635,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",Microsoft,Hardware Compatibility Program Specifications',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 4}",Windows Hardware Compatibility Program Specifications',Entity(text='2016',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",2016,Server Semi-Annual',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}",2016,end_char=17759,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 94}",2016,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Server Semi-Annual',end_char=17759,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Server Semi-Annual',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=17759,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=17919,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=17919,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 78}","href=""https://learn.microsoft.com",confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=18149,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 6}",Local Administrator Password Solution,Microsoft,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 16}",Windows,Microsoft Advanced Threat Analytics,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 68}",Mimikatz,Wherever Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 68}",1546,Password Solution',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 49}",Password Solution',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 33}",Advanced Threat Analytics',end_char=18856,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=18856,Microsoft Advanced Threat Analytics',related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 26}",Microsoft Advanced Threat Analytics',Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 53}",Microsoft Advanced Threat Analytics',start_char=18999,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 71}",Microsoft Advanced Threat Analytics',end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 87}",Microsoft Advanced Threat Analytics',confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 19}",Mimikatz,start_char=18999,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 37}",Mimikatz,end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",start_char=18999,end_char=19016,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 18}",start_char=18999,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=19016,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 27}",Mimikatz,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 72}",Mimikatz,end_char=19540,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=19540,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 91}",Securing Active,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 71}",PowerShell,Mimikatz,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",>Lateral Movement Framework,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 25}",Mimikatz,Directory,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 34}",Entity(text='PowerShell,end_char=20611,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 50}",Entity(text='PowerShell,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 2}",end_char=20611,confidence=1.0,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=20611,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 76}",confidence=1.0,PowerShell,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 63}",PowerShell,end_char=20690,related_to
0.6,,"{""extraction_method"": ""co_occurrence"", ""distance"": 92}",end_char=20690,Mimikatz,related_to
1 confidence id metadata source_id target_id type
2 0.6 {"extraction_method": "co_occurrence", "distance": 2} Australia Canada related_to
3 0.6 {"extraction_method": "co_occurrence", "distance": 10} Australia New Zealand related_to
4 0.6 {"extraction_method": "co_occurrence", "distance": 23} Australia the United Kingdom related_to
5 0.6 {"extraction_method": "co_occurrence", "distance": 51} Australia United States.[1][2][3][4][5]</p>\n related_to
6 0.6 {"extraction_method": "co_occurrence", "distance": 2} Canada New Zealand related_to
7 0.6 {"extraction_method": "co_occurrence", "distance": 15} Canada the United Kingdom related_to
8 0.6 {"extraction_method": "co_occurrence", "distance": 43} Canada United States.[1][2][3][4][5]</p>\n related_to
9 0.6 {"extraction_method": "co_occurrence", "distance": 2} New Zealand the United Kingdom related_to
10 0.6 {"extraction_method": "co_occurrence", "distance": 30} New Zealand United States.[1][2][3][4][5]</p>\n related_to
11 0.6 {"extraction_method": "co_occurrence", "distance": 10} the United Kingdom United States.[1][2][3][4][5]</p>\n related_to
12 0.6 {"extraction_method": "co_occurrence", "distance": 2} li>Webshell China related_to
13 0.6 {"extraction_method": "co_occurrence", "distance": 5} Australia Entity(text='Canada related_to
14 0.6 {"extraction_method": "co_occurrence", "distance": 70} Australia confidence=1.0 related_to
15 0.6 {"extraction_method": "co_occurrence", "distance": 46} Entity(text='Canada confidence=1.0 related_to
16 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 Canada related_to
17 0.6 {"extraction_method": "co_occurrence", "distance": 87} confidence=1.0 Entity(text='New Zealand' related_to
18 0.6 {"extraction_method": "co_occurrence", "distance": 5} Canada Entity(text='New Zealand' related_to
19 0.6 {"extraction_method": "co_occurrence", "distance": 4} New Zealand' Entity(text='the United Kingdom' related_to
20 0.6 {"extraction_method": "co_occurrence", "distance": 81} New Zealand' confidence=1.0 related_to
21 0.6 {"extraction_method": "co_occurrence", "distance": 45} Entity(text='the United Kingdom' confidence=1.0 related_to
22 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 the United Kingdom' related_to
23 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=482 confidence=1.0 related_to
24 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=482 China related_to
25 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 China related_to
26 0.6 {"extraction_method": "co_occurrence", "distance": 85} May 2015 Frutas related_to
27 0.6 {"extraction_method": "co_occurrence", "distance": 2} Advanced Persistent Threat APT related_to
28 0.6 {"extraction_method": "co_occurrence", "distance": 86} Advanced Persistent Threat Quasar related_to
29 0.6 {"extraction_method": "co_occurrence", "distance": 81} APT Quasar related_to
30 0.6 {"extraction_method": "co_occurrence", "distance": 89} early 2017 Society for Worldwide Interbank Financial Telecommunication related_to
31 0.6 {"extraction_method": "co_occurrence", "distance": 11} Windows Registry Task related_to
32 0.6 {"extraction_method": "co_occurrence", "distance": 32} Windows Registry li>Significant related_to
33 0.6 {"extraction_method": "co_occurrence", "distance": 17} Task li>Significant related_to
34 0.6 {"extraction_method": "co_occurrence", "distance": 79} Frutas confidence=1.0 related_to
35 0.6 {"extraction_method": "co_occurrence", "distance": 33} Entity(text='MAC end_char=4752 related_to
36 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=4752 MAC related_to
37 0.6 {"extraction_method": "co_occurrence", "distance": 5} PII Entity(text='early 2018' related_to
38 0.6 {"extraction_method": "co_occurrence", "distance": 77} PII confidence=1.0 related_to
39 0.6 {"extraction_method": "co_occurrence", "distance": 48} Entity(text='early 2018' confidence=1.0 related_to
40 0.6 {"extraction_method": "co_occurrence", "distance": 91} confidence=1.0 Entity(text='early 2017' related_to
41 0.6 {"extraction_method": "co_occurrence", "distance": 47} Worldwide Interbank Financial Telecommunication' confidence=1.0 related_to
42 0.6 {"extraction_method": "co_occurrence", "distance": 2} The United Kingdom National Cyber Security Centre UK related_to
43 0.6 {"extraction_method": "co_occurrence", "distance": 30} >China Chopper China Chopper related_to
44 0.6 {"extraction_method": "co_occurrence", "distance": 52} China Chopper China Chopper related_to
45 0.6 {"extraction_method": "co_occurrence", "distance": 52} 2869 United Kingdom National Cyber Security Centre' related_to
46 0.6 {"extraction_method": "co_occurrence", "distance": 32} United Kingdom National Cyber Security Centre' end_char=7491 related_to
47 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=7491 the United Kingdom National Cyber Security Centre' related_to
48 0.6 {"extraction_method": "co_occurrence", "distance": 67} the United Kingdom National Cyber Security Centre' confidence=1.0 related_to
49 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 UK related_to
50 0.6 {"extraction_method": "co_occurrence", "distance": 79} China confidence=1.0 related_to
51 0.6 {"extraction_method": "co_occurrence", "distance": 51} Chopper confidence=1.0 related_to
52 0.6 {"extraction_method": "co_occurrence", "distance": 82} confidence=1.0 Entity(text='>China Chopper' related_to
53 0.6 {"extraction_method": "co_occurrence", "distance": 90} summer 2018 CVE-2017-3066 related_to
54 0.6 {"extraction_method": "co_occurrence", "distance": 90} CVE-2017-3066 Adobe ColdFusion related_to
55 0.6 {"extraction_method": "co_occurrence", "distance": 54} 1327 2018 related_to
56 0.6 {"extraction_method": "co_occurrence", "distance": 4} summer 2018' Entity(text='CVE-2017-3066' related_to
57 0.6 {"extraction_method": "co_occurrence", "distance": 93} href="https://owasp.org China Chopper related_to
58 0.6 {"extraction_method": "co_occurrence", "distance": 97} Transport Layer Security China Chopper related_to
59 0.6 {"extraction_method": "co_occurrence", "distance": 5} Linux Windows related_to
60 0.6 {"extraction_method": "co_occurrence", "distance": 42} Linux href="https://cloud.google.com related_to
61 0.6 {"extraction_method": "co_occurrence", "distance": 30} Windows href="https://cloud.google.com related_to
62 0.6 {"extraction_method": "co_occurrence", "distance": 2} Hypertext Preprocessor PHP related_to
63 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=11131 confidence=1.0 related_to
64 0.6 {"extraction_method": "co_occurrence", "distance": 28} href="https://cloud.google.com Preprocessor' related_to
65 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=12304 confidence=1.0 related_to
66 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=12304 PHP related_to
67 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 PHP related_to
68 0.8 {"extraction_method": "dependency", "dependency_path": "ROOT -> ... -> pobj"} Mimikatz recent years use
69 0.6 {"extraction_method": "co_occurrence", "distance": 82} Mimikatz PowerShell Empire related_to
70 0.6 {"extraction_method": "co_occurrence", "distance": 72} Local Area Network Windows XP related_to
71 0.6 {"extraction_method": "co_occurrence", "distance": 84} Local Area Network 2003 related_to
72 0.6 {"extraction_method": "co_occurrence", "distance": 2} Windows XP 2003 related_to
73 0.6 {"extraction_method": "co_occurrence", "distance": 40} Mimikatz PowerShell related_to
74 0.6 {"extraction_method": "co_occurrence", "distance": 21} Invoke-Mimikatz Mimikatz related_to
75 0.6 {"extraction_method": "co_occurrence", "distance": 5} several years 2011 related_to
76 0.6 {"extraction_method": "co_occurrence", "distance": 87} DigiNotar a month related_to
77 0.6 {"extraction_method": "co_occurrence", "distance": 44} a month Mimikatz related_to
78 0.6 {"extraction_method": "co_occurrence", "distance": 59} Mimikatz NotPetya related_to
79 0.6 {"extraction_method": "co_occurrence", "distance": 72} Mimikatz BadRabbit related_to
80 0.6 {"extraction_method": "co_occurrence", "distance": 5} NotPetya BadRabbit related_to
81 0.6 {"extraction_method": "co_occurrence", "distance": 37} NotPetya 2017 related_to
82 0.6 {"extraction_method": "co_occurrence", "distance": 23} BadRabbit 2017 related_to
83 0.6 {"extraction_method": "co_occurrence", "distance": 33} Microsoft Mimikatz related_to
84 0.6 {"extraction_method": "co_occurrence", "distance": 10} Mimikatz Microsoft related_to
85 0.6 {"extraction_method": "co_occurrence", "distance": 25} 2014-93434251-04ac target="_blank related_to
86 0.6 {"extraction_method": "co_occurrence", "distance": 95} target="_blank May 13 related_to
87 0.6 {"extraction_method": "co_occurrence", "distance": 2} Credential Guard.</p>\n >Credential Guard related_to
88 0.6 {"extraction_method": "co_occurrence", "distance": 85} Credential Guard.</p>\n Microsoft related_to
89 0.6 {"extraction_method": "co_occurrence", "distance": 97} Credential Guard.</p>\n Windows Hardware Compatibility Program Specifications related_to
90 0.6 {"extraction_method": "co_occurrence", "distance": 66} >Credential Guard Microsoft related_to
91 0.6 {"extraction_method": "co_occurrence", "distance": 78} >Credential Guard Windows Hardware Compatibility Program Specifications related_to
92 0.6 {"extraction_method": "co_occurrence", "distance": 3} Microsoft Windows Hardware Compatibility Program Specifications related_to
93 0.6 {"extraction_method": "co_occurrence", "distance": 89} Microsoft 2016 related_to
94 0.6 {"extraction_method": "co_occurrence", "distance": 98} Microsoft Windows Server Semi-Annual related_to
95 0.6 {"extraction_method": "co_occurrence", "distance": 33} Windows Hardware Compatibility Program Specifications 2016 related_to
96 0.6 {"extraction_method": "co_occurrence", "distance": 42} Windows Hardware Compatibility Program Specifications Windows Server Semi-Annual related_to
97 0.6 {"extraction_method": "co_occurrence", "distance": 88} Windows Hardware Compatibility Program Specifications li related_to
98 0.6 {"extraction_method": "co_occurrence", "distance": 5} 2016 Windows Server Semi-Annual related_to
99 0.6 {"extraction_method": "co_occurrence", "distance": 51} 2016 li related_to
100 0.6 {"extraction_method": "co_occurrence", "distance": 20} Windows Server Semi-Annual li related_to
101 0.6 {"extraction_method": "co_occurrence", "distance": 6} Microsoft href="https://learn.microsoft.com related_to
102 0.6 {"extraction_method": "co_occurrence", "distance": 5} Windows 10 Windows related_to
103 0.6 {"extraction_method": "co_occurrence", "distance": 63} Mimikatz end_char=14141 related_to
104 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=14141 Mimikatz related_to
105 0.6 {"extraction_method": "co_occurrence", "distance": 63} Mimikatz end_char=14305 related_to
106 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=14305 Mimikatz related_to
107 0.6 {"extraction_method": "co_occurrence", "distance": 5} Mimikatz Entity(text='PowerShell Empire' related_to
108 0.6 {"extraction_method": "co_occurrence", "distance": 33} Area Network' end_char=14911 related_to
109 0.6 {"extraction_method": "co_occurrence", "distance": 49} Area Network' confidence=1.0 related_to
110 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=14911 confidence=1.0 related_to
111 0.6 {"extraction_method": "co_occurrence", "distance": 50} XP confidence=1.0 related_to
112 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 2003 related_to
113 0.6 {"extraction_method": "co_occurrence", "distance": 5} Mimikatz Entity(text='PowerShell related_to
114 0.6 {"extraction_method": "co_occurrence", "distance": 78} Invoke-Mimikatz' confidence=1.0 related_to
115 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 Mimikatz related_to
116 0.6 {"extraction_method": "co_occurrence", "distance": 82} Mimikatz confidence=1.0 related_to
117 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 several year' related_to
118 0.6 {"extraction_method": "co_occurrence", "distance": 56} several year' end_char=15614 related_to
119 0.6 {"extraction_method": "co_occurrence", "distance": 72} several year' confidence=1.0 related_to
120 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=15614 confidence=1.0 related_to
121 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=15736 confidence=1.0 related_to
122 0.6 {"extraction_method": "co_occurrence", "distance": 5} Mimikatz Entity(text='NotPetya related_to
123 0.6 {"extraction_method": "co_occurrence", "distance": 50} Entity(text='NotPetya confidence=1.0 related_to
124 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 NotPetya related_to
125 0.6 {"extraction_method": "co_occurrence", "distance": 61} NotPetya end_char=15962 related_to
126 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=15962 BadRabbit related_to
127 0.6 {"extraction_method": "co_occurrence", "distance": 61} Mimikatz end_char=16742, confidence=1.0, metadata={'extraction_method related_to
128 0.6 {"extraction_method": "co_occurrence", "distance": 46} end_char=16742, confidence=1.0, metadata={'extraction_method Microsoft related_to
129 0.6 {"extraction_method": "co_occurrence", "distance": 30} May 13' label='LAW related_to
130 0.6 {"extraction_method": "co_occurrence", "distance": 77} May 13' confidence=1.0 related_to
131 0.6 {"extraction_method": "co_occurrence", "distance": 37} label='LAW confidence=1.0 related_to
132 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 Credential Guard.</p>\n related_to
133 0.6 {"extraction_method": "co_occurrence", "distance": 80} Credential Guard.</p>\n end_char=17635 related_to
134 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=17635 Microsoft related_to
135 0.6 {"extraction_method": "co_occurrence", "distance": 26} Microsoft Hardware Compatibility Program Specifications' related_to
136 0.6 {"extraction_method": "co_occurrence", "distance": 4} Windows Hardware Compatibility Program Specifications' Entity(text='2016' related_to
137 0.6 {"extraction_method": "co_occurrence", "distance": 26} 2016 Server Semi-Annual' related_to
138 0.6 {"extraction_method": "co_occurrence", "distance": 78} 2016 end_char=17759 related_to
139 0.6 {"extraction_method": "co_occurrence", "distance": 94} 2016 confidence=1.0 related_to
140 0.6 {"extraction_method": "co_occurrence", "distance": 33} Server Semi-Annual' end_char=17759 related_to
141 0.6 {"extraction_method": "co_occurrence", "distance": 49} Server Semi-Annual' confidence=1.0 related_to
142 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=17759 confidence=1.0 related_to
143 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=17919 confidence=1.0 related_to
144 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=17919 Microsoft related_to
145 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 Microsoft related_to
146 0.6 {"extraction_method": "co_occurrence", "distance": 78} href="https://learn.microsoft.com confidence=1.0 related_to
147 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=18149 confidence=1.0 related_to
148 0.6 {"extraction_method": "co_occurrence", "distance": 6} Local Administrator Password Solution Microsoft related_to
149 0.6 {"extraction_method": "co_occurrence", "distance": 16} Windows Microsoft Advanced Threat Analytics related_to
150 0.6 {"extraction_method": "co_occurrence", "distance": 68} Mimikatz Wherever Mimikatz related_to
151 0.6 {"extraction_method": "co_occurrence", "distance": 68} 1546 Password Solution' related_to
152 0.6 {"extraction_method": "co_occurrence", "distance": 49} Password Solution' confidence=1.0 related_to
153 0.6 {"extraction_method": "co_occurrence", "distance": 33} Advanced Threat Analytics' end_char=18856 related_to
154 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=18856 Microsoft Advanced Threat Analytics' related_to
155 0.6 {"extraction_method": "co_occurrence", "distance": 26} Microsoft Advanced Threat Analytics' Mimikatz related_to
156 0.6 {"extraction_method": "co_occurrence", "distance": 53} Microsoft Advanced Threat Analytics' start_char=18999 related_to
157 0.6 {"extraction_method": "co_occurrence", "distance": 71} Microsoft Advanced Threat Analytics' end_char=19016 related_to
158 0.6 {"extraction_method": "co_occurrence", "distance": 87} Microsoft Advanced Threat Analytics' confidence=1.0 related_to
159 0.6 {"extraction_method": "co_occurrence", "distance": 19} Mimikatz start_char=18999 related_to
160 0.6 {"extraction_method": "co_occurrence", "distance": 37} Mimikatz end_char=19016 related_to
161 0.6 {"extraction_method": "co_occurrence", "distance": 2} start_char=18999 end_char=19016 related_to
162 0.6 {"extraction_method": "co_occurrence", "distance": 18} start_char=18999 confidence=1.0 related_to
163 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=19016 confidence=1.0 related_to
164 0.6 {"extraction_method": "co_occurrence", "distance": 27} Mimikatz Mimikatz related_to
165 0.6 {"extraction_method": "co_occurrence", "distance": 72} Mimikatz end_char=19540 related_to
166 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=19540 confidence=1.0 related_to
167 0.6 {"extraction_method": "co_occurrence", "distance": 91} Securing Active PowerShell related_to
168 0.6 {"extraction_method": "co_occurrence", "distance": 71} PowerShell Mimikatz related_to
169 0.6 {"extraction_method": "co_occurrence", "distance": 2} >Lateral Movement Framework PowerShell related_to
170 0.6 {"extraction_method": "co_occurrence", "distance": 25} Mimikatz Directory related_to
171 0.6 {"extraction_method": "co_occurrence", "distance": 34} Entity(text='PowerShell end_char=20611 related_to
172 0.6 {"extraction_method": "co_occurrence", "distance": 50} Entity(text='PowerShell confidence=1.0 related_to
173 0.6 {"extraction_method": "co_occurrence", "distance": 2} end_char=20611 confidence=1.0 related_to
174 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=20611 PowerShell related_to
175 0.6 {"extraction_method": "co_occurrence", "distance": 76} confidence=1.0 PowerShell related_to
176 0.6 {"extraction_method": "co_occurrence", "distance": 63} PowerShell end_char=20690 related_to
177 0.6 {"extraction_method": "co_occurrence", "distance": 92} end_char=20690 Mimikatz related_to