mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-09-13 04:04:09 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
f542fc86528fad3dba767dfc089dca8d1ac7327a
semantica/cookbook/use_cases/intelligence/criminal_network.graphml
T

2163 lines
73 KiB
XML
Raw Blame History

<?xml version="1.0" encoding="UTF-8"?>
<graphml xmlns="http://graphml.graphdrawing.org/xmlns"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://graphml.graphdrawing.org/xmlns
http://graphml.graphdrawing.org/xmlns/1.0/graphml.xsd">
<key id="type" for="node" attr.name="type" attr.type="string"/>
<key id="confidence" for="node" attr.name="confidence" attr.type="double"/>
<graph id="G" edgedefault="directed">
<node id="Chunk(text='<div>\n">
<data key="label">Chunk(text='<div>\n</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Australia">
<data key="label">Australia</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Canada">
<data key="label">Canada</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="New Zealand">
<data key="label">New Zealand</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="the United Kingdom">
<data key="label">the United Kingdom</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="United States.[1][2][3][4][5]</p>\n">
<data key="label">United States.[1][2][3][4][5]</p>\n</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="li>Webshell">
<data key="label">li>Webshell</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="China">
<data key="label">China</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="li>C2 Obfuscation">
<data key="label">li>C2 Obfuscation</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Australia">
<data key="label">Australia</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='Canada">
<data key="label">Entity(text='Canada</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Canada">
<data key="label">Canada</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='New Zealand'">
<data key="label">Entity(text='New Zealand'</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="New Zealand'">
<data key="label">New Zealand'</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='the United Kingdom'">
<data key="label">Entity(text='the United Kingdom'</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="the United Kingdom'">
<data key="label">the United Kingdom'</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=482">
<data key="label">end_char=482</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China">
<data key="label">China</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Today">
<data key="label">Today</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="today">
<data key="label">today</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="May 2015">
<data key="label">May 2015</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Frutas">
<data key="label">Frutas</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Wireshark">
<data key="label">Wireshark</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Advanced Persistent Threat">
<data key="label">Advanced Persistent Threat</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="APT">
<data key="label">APT</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Quasar">
<data key="label">Quasar</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Java">
<data key="label">Java</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="MAC">
<data key="label">MAC</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PII">
<data key="label">PII</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="early 2018">
<data key="label">early 2018</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="early 2017">
<data key="label">early 2017</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Society for Worldwide Interbank Financial Telecommunication">
<data key="label">Society for Worldwide Interbank Financial Telecommunication</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows Registry">
<data key="label">Windows Registry</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Task">
<data key="label">Task</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="li>Significant">
<data key="label">li>Significant</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="IP">
<data key="label">IP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=2514">
<data key="label">end_char=2514</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='May 2015'">
<data key="label">Entity(text='May 2015'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="May 2015'">
<data key="label">May 2015'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Frutas">
<data key="label">Frutas</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=4132">
<data key="label">end_char=4132</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="APT">
<data key="label">APT</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Quasar">
<data key="label">Quasar</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Java">
<data key="label">Java</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='MAC">
<data key="label">Entity(text='MAC</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=4752">
<data key="label">end_char=4752</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="MAC">
<data key="label">MAC</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PII">
<data key="label">PII</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='early 2018'">
<data key="label">Entity(text='early 2018'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='early 2017'">
<data key="label">Entity(text='early 2017'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Worldwide Interbank Financial Telecommunication'">
<data key="label">Worldwide Interbank Financial Telecommunication'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Registry">
<data key="label">Registry</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="IP">
<data key="label">IP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="The United Kingdom National Cyber Security Centre">
<data key="label">The United Kingdom National Cyber Security Centre</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="UK">
<data key="label">UK</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="China">
<data key="label">China</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id=">China Chopper">
<data key="label">>China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id=">China Chopper">
<data key="label">>China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2869">
<data key="label">2869</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="United Kingdom National Cyber Security Centre'">
<data key="label">United Kingdom National Cyber Security Centre'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=7491">
<data key="label">end_char=7491</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="the United Kingdom National Cyber Security Centre'">
<data key="label">the United Kingdom National Cyber Security Centre'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="UK">
<data key="label">UK</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="China">
<data key="label">China</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='>China Chopper'">
<data key="label">Entity(text='>China Chopper'</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="summer 2018">
<data key="label">summer 2018</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="CVE-2017-3066">
<data key="label">CVE-2017-3066</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Adobe ColdFusion">
<data key="label">Adobe ColdFusion</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="1327">
<data key="label">1327</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="2018">
<data key="label">2018</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="summer 2018'">
<data key="label">summer 2018'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='CVE-2017-3066'">
<data key="label">Entity(text='CVE-2017-3066'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="ColdFusion">
<data key="label">ColdFusion</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='second">
<data key="label">Entity(text='second</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://owasp.org">
<data key="label">href="https://owasp.org</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Transport Layer Security">
<data key="label">Transport Layer Security</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="China Chopper">
<data key="label">China Chopper</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Linux">
<data key="label">Linux</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows">
<data key="label">Windows</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://cloud.google.com">
<data key="label">href="https://cloud.google.com</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Hypertext Preprocessor">
<data key="label">Hypertext Preprocessor</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="PHP">
<data key="label">PHP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="1543">
<data key="label">1543</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=11131">
<data key="label">end_char=11131</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Chopper">
<data key="label">Chopper</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://cloud.google.com">
<data key="label">href="https://cloud.google.com</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Preprocessor'">
<data key="label">Preprocessor'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=12304">
<data key="label">end_char=12304</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PHP">
<data key="label">PHP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PHP">
<data key="label">PHP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2007">
<data key="label">2007</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Local Security Authority Subsystem Service">
<data key="label">Local Security Authority Subsystem Service</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="recent years">
<data key="label">recent years</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="1092">
<data key="label">1092</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PHP">
<data key="label">PHP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2007">
<data key="label">2007</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=12962">
<data key="label">end_char=12962</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Security Authority Subsystem Service'">
<data key="label">Security Authority Subsystem Service'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=13436">
<data key="label">end_char=13436</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell Empire">
<data key="label">PowerShell Empire</data>
<data key="type">GPE</data>
<data key="confidence">1.0</data>
</node>
<node id="Local Area Network">
<data key="label">Local Area Network</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows XP">
<data key="label">Windows XP</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="2003">
<data key="label">2003</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell">
<data key="label">PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Invoke-Mimikatz">
<data key="label">Invoke-Mimikatz</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="several years">
<data key="label">several years</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="2011">
<data key="label">2011</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="DigiNotar">
<data key="label">DigiNotar</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="a month">
<data key="label">a month</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="NotPetya">
<data key="label">NotPetya</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="BadRabbit">
<data key="label">BadRabbit</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2017">
<data key="label">2017</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows 8.1/Server">
<data key="label">Windows 8.1/Server</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://support.microsoft.com">
<data key="label">href="https://support.microsoft.com</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2014-93434251-04ac">
<data key="label">2014-93434251-04ac</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="target="_blank">
<data key="label">target="_blank</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="May 13">
<data key="label">May 13</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Credential Guard.</p>\n">
<data key="label">Credential Guard.</p>\n</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id=">Credential Guard">
<data key="label">>Credential Guard</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows Hardware Compatibility Program Specifications">
<data key="label">Windows Hardware Compatibility Program Specifications</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2016">
<data key="label">2016</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows Server Semi-Annual">
<data key="label">Windows Server Semi-Annual</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="li">
<data key="label">li</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://learn.microsoft.com">
<data key="label">href="https://learn.microsoft.com</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows 10">
<data key="label">Windows 10</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows">
<data key="label">Windows</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="4769">
<data key="label">4769</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=14141">
<data key="label">end_char=14141</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=14305">
<data key="label">end_char=14305</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='PowerShell Empire'">
<data key="label">Entity(text='PowerShell Empire'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Area Network'">
<data key="label">Area Network'</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=14911">
<data key="label">end_char=14911</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="XP">
<data key="label">XP</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2003">
<data key="label">2003</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='PowerShell">
<data key="label">Entity(text='PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell">
<data key="label">PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Invoke-Mimikatz'">
<data key="label">Invoke-Mimikatz'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="several year'">
<data key="label">several year'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=15614">
<data key="label">end_char=15614</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=15736">
<data key="label">end_char=15736</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='NotPetya">
<data key="label">Entity(text='NotPetya</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="NotPetya">
<data key="label">NotPetya</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=15962">
<data key="label">end_char=15962</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="BadRabbit">
<data key="label">BadRabbit</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2017">
<data key="label">2017</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=16742, confidence=1.0, metadata={'extraction_method">
<data key="label">end_char=16742, confidence=1.0, metadata={'extraction_method</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://support.microsoft.com">
<data key="label">href="https://support.microsoft.com</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2014-93434251-04ac'">
<data key="label">2014-93434251-04ac'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="May 13'">
<data key="label">May 13'</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="label='LAW">
<data key="label">label='LAW</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Credential Guard.</p>\n">
<data key="label">Credential Guard.</p>\n</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=17635">
<data key="label">end_char=17635</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Hardware Compatibility Program Specifications'">
<data key="label">Hardware Compatibility Program Specifications'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows Hardware Compatibility Program Specifications'">
<data key="label">Windows Hardware Compatibility Program Specifications'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='2016'">
<data key="label">Entity(text='2016'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="2016">
<data key="label">2016</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Server Semi-Annual'">
<data key="label">Server Semi-Annual'</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=17759">
<data key="label">end_char=17759</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=17817">
<data key="label">end_char=17817</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=17919">
<data key="label">end_char=17919</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="href="https://learn.microsoft.com">
<data key="label">href="https://learn.microsoft.com</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=18149">
<data key="label">end_char=18149</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Local Administrator Password Solution">
<data key="label">Local Administrator Password Solution</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Windows">
<data key="label">Windows</data>
<data key="type">LOC</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft Advanced Threat Analytics">
<data key="label">Microsoft Advanced Threat Analytics</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Numerous Mimikatz">
<data key="label">Numerous Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Wherever Mimikatz">
<data key="label">Wherever Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="1546">
<data key="label">1546</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Password Solution'">
<data key="label">Password Solution'</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft">
<data key="label">Microsoft</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Advanced Threat Analytics'">
<data key="label">Advanced Threat Analytics'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=18856">
<data key="label">end_char=18856</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="Microsoft Advanced Threat Analytics'">
<data key="label">Microsoft Advanced Threat Analytics'</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="start_char=18999">
<data key="label">start_char=18999</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=19016">
<data key="label">end_char=19016</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=19540">
<data key="label">end_char=19540</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Active Directory">
<data key="label">Active Directory</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Securing Active">
<data key="label">Securing Active</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell">
<data key="label">PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id=">Lateral Movement Framework">
<data key="label">>Lateral Movement Framework</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell">
<data key="label">PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="1133">
<data key="label">1133</data>
<data key="type">DATE</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Directory">
<data key="label">Directory</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="Entity(text='PowerShell">
<data key="label">Entity(text='PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=20611">
<data key="label">end_char=20611</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="confidence=1.0">
<data key="label">confidence=1.0</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="PowerShell">
<data key="label">PowerShell</data>
<data key="type">ORG</data>
<data key="confidence">1.0</data>
</node>
<node id="end_char=20690">
<data key="label">end_char=20690</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<node id="Mimikatz">
<data key="label">Mimikatz</data>
<data key="type">PERSON</data>
<data key="confidence">1.0</data>
</node>
<edge source="Australia" target="Canada">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Australia" target="New Zealand">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Australia" target="the United Kingdom">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Australia" target="United States.[1][2][3][4][5]</p>\n">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Canada" target="New Zealand">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Canada" target="the United Kingdom">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Canada" target="United States.[1][2][3][4][5]</p>\n">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="New Zealand" target="the United Kingdom">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="New Zealand" target="United States.[1][2][3][4][5]</p>\n">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="the United Kingdom" target="United States.[1][2][3][4][5]</p>\n">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="li>Webshell" target="China">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Australia" target="Entity(text='Canada">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Australia" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='Canada" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Canada">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Entity(text='New Zealand'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Canada" target="Entity(text='New Zealand'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="New Zealand'" target="Entity(text='the United Kingdom'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="New Zealand'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='the United Kingdom'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="the United Kingdom'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=482" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=482" target="China">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="China">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="May 2015" target="Frutas">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Advanced Persistent Threat" target="APT">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Advanced Persistent Threat" target="Quasar">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="APT" target="Quasar">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="early 2017" target="Society for Worldwide Interbank Financial Telecommunication">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Registry" target="Task">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Registry" target="li>Significant">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Task" target="li>Significant">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Frutas" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='MAC" target="end_char=4752">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=4752" target="MAC">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="PII" target="Entity(text='early 2018'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="PII" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='early 2018'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Entity(text='early 2017'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Worldwide Interbank Financial Telecommunication'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="The United Kingdom National Cyber Security Centre" target="UK">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source=">China Chopper" target="China Chopper">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="China Chopper" target="China Chopper">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2869" target="United Kingdom National Cyber Security Centre'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="United Kingdom National Cyber Security Centre'" target="end_char=7491">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=7491" target="the United Kingdom National Cyber Security Centre'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="the United Kingdom National Cyber Security Centre'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="UK">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="China" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Chopper" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Entity(text='>China Chopper'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="summer 2018" target="CVE-2017-3066">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="CVE-2017-3066" target="Adobe ColdFusion">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="1327" target="2018">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="summer 2018'" target="Entity(text='CVE-2017-3066'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="href="https://owasp.org" target="China Chopper">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Transport Layer Security" target="China Chopper">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Linux" target="Windows">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Linux" target="href="https://cloud.google.com">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows" target="href="https://cloud.google.com">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Hypertext Preprocessor" target="PHP">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=11131" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="href="https://cloud.google.com" target="Preprocessor'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=12304" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=12304" target="PHP">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="PHP">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="recent years">
<data key="label">use</data>
<data key="confidence">0.8</data>
</edge>
<edge source="Mimikatz" target="PowerShell Empire">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Local Area Network" target="Windows XP">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Local Area Network" target="2003">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows XP" target="2003">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Invoke-Mimikatz" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="several years" target="2011">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="DigiNotar" target="a month">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="a month" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="NotPetya">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="BadRabbit">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="NotPetya" target="BadRabbit">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="NotPetya" target="2017">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="BadRabbit" target="2017">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2014-93434251-04ac" target="target="_blank">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="target="_blank" target="May 13">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Credential Guard.</p>\n" target=">Credential Guard">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Credential Guard.</p>\n" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Credential Guard.</p>\n" target="Windows Hardware Compatibility Program Specifications">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source=">Credential Guard" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source=">Credential Guard" target="Windows Hardware Compatibility Program Specifications">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="Windows Hardware Compatibility Program Specifications">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="2016">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="Windows Server Semi-Annual">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Hardware Compatibility Program Specifications" target="2016">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Hardware Compatibility Program Specifications" target="Windows Server Semi-Annual">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Hardware Compatibility Program Specifications" target="li">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2016" target="Windows Server Semi-Annual">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2016" target="li">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Server Semi-Annual" target="li">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="href="https://learn.microsoft.com">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows 10" target="Windows">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="end_char=14141">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=14141" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="end_char=14305">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=14305" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Entity(text='PowerShell Empire'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Area Network'" target="end_char=14911">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Area Network'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=14911" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="XP" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="2003">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Entity(text='PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Invoke-Mimikatz'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="several year'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="several year'" target="end_char=15614">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="several year'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=15614" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=15736" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Entity(text='NotPetya">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='NotPetya" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="NotPetya">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="NotPetya" target="end_char=15962">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=15962" target="BadRabbit">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="end_char=16742, confidence=1.0, metadata={'extraction_method">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=16742, confidence=1.0, metadata={'extraction_method" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="May 13'" target="label='LAW">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="May 13'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="label='LAW" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Credential Guard.</p>\n">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Credential Guard.</p>\n" target="end_char=17635">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=17635" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft" target="Hardware Compatibility Program Specifications'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows Hardware Compatibility Program Specifications'" target="Entity(text='2016'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2016" target="Server Semi-Annual'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2016" target="end_char=17759">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="2016" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Server Semi-Annual'" target="end_char=17759">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Server Semi-Annual'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=17759" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=17919" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=17919" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="href="https://learn.microsoft.com" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=18149" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Local Administrator Password Solution" target="Microsoft">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Windows" target="Microsoft Advanced Threat Analytics">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Wherever Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="1546" target="Password Solution'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Password Solution'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Advanced Threat Analytics'" target="end_char=18856">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=18856" target="Microsoft Advanced Threat Analytics'">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft Advanced Threat Analytics'" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft Advanced Threat Analytics'" target="start_char=18999">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft Advanced Threat Analytics'" target="end_char=19016">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Microsoft Advanced Threat Analytics'" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="start_char=18999">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="end_char=19016">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="start_char=18999" target="end_char=19016">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="start_char=18999" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=19016" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="end_char=19540">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=19540" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Securing Active" target="PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="PowerShell" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source=">Lateral Movement Framework" target="PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Mimikatz" target="Directory">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='PowerShell" target="end_char=20611">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="Entity(text='PowerShell" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=20611" target="confidence=1.0">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=20611" target="PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="confidence=1.0" target="PowerShell">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="PowerShell" target="end_char=20690">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
<edge source="end_char=20690" target="Mimikatz">
<data key="label">related_to</data>
<data key="confidence">0.6</data>
</edge>
</graph>
</graphml>
Reference in New Issue View Git Blame Copy Permalink