mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-09-13 04:04:09 +00:00
4956 lines
112 KiB
JSON
4956 lines
112 KiB
JSON
{
|
|
"entities": [
|
|
{
|
|
"id": "Chunk(text='<div>\\n",
|
|
"name": "Chunk(text='<div>\\n",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "chunk(text='<div>\\n"
|
|
}
|
|
},
|
|
{
|
|
"id": "Australia",
|
|
"name": "Australia",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Australia"
|
|
}
|
|
},
|
|
{
|
|
"id": "Canada",
|
|
"name": "Canada",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Canada"
|
|
}
|
|
},
|
|
{
|
|
"id": "New Zealand",
|
|
"name": "New Zealand",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "New Zealand"
|
|
}
|
|
},
|
|
{
|
|
"id": "the United Kingdom",
|
|
"name": "the United Kingdom",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "the United Kingdom"
|
|
}
|
|
},
|
|
{
|
|
"id": "United States.[1][2][3][4][5]</p>\\n",
|
|
"name": "United States.[1][2][3][4][5]</p>\\n",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "United States.[1][2][3][4][5]</p>\\n"
|
|
}
|
|
},
|
|
{
|
|
"id": "li>Webshell",
|
|
"name": "li>Webshell",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "li>Webshell"
|
|
}
|
|
},
|
|
{
|
|
"id": "China",
|
|
"name": "China",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China"
|
|
}
|
|
},
|
|
{
|
|
"id": "li>C2 Obfuscation",
|
|
"name": "li>C2 Obfuscation",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "li>C2 Obfuscation"
|
|
}
|
|
},
|
|
{
|
|
"id": "Australia",
|
|
"name": "Australia",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Australia"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='Canada",
|
|
"name": "Entity(text='Canada",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='Canada"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Canada",
|
|
"name": "Canada",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Canada"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='New Zealand'",
|
|
"name": "Entity(text='New Zealand'",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='New Zealand'"
|
|
}
|
|
},
|
|
{
|
|
"id": "New Zealand'",
|
|
"name": "New Zealand'",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "New Zealand'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='the United Kingdom'",
|
|
"name": "Entity(text='the United Kingdom'",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "entity(text='the United Kingdom'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "the United Kingdom'",
|
|
"name": "the United Kingdom'",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "the United Kingdom'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=482",
|
|
"name": "end_char=482",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=482"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "China",
|
|
"name": "China",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China"
|
|
}
|
|
},
|
|
{
|
|
"id": "Today",
|
|
"name": "Today",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "today"
|
|
}
|
|
},
|
|
{
|
|
"id": "today",
|
|
"name": "today",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "today"
|
|
}
|
|
},
|
|
{
|
|
"id": "May 2015",
|
|
"name": "May 2015",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "May 2015"
|
|
}
|
|
},
|
|
{
|
|
"id": "Frutas",
|
|
"name": "Frutas",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Frutas"
|
|
}
|
|
},
|
|
{
|
|
"id": "Wireshark",
|
|
"name": "Wireshark",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Wireshark"
|
|
}
|
|
},
|
|
{
|
|
"id": "Advanced Persistent Threat",
|
|
"name": "Advanced Persistent Threat",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Advanced Persistent Threat"
|
|
}
|
|
},
|
|
{
|
|
"id": "APT",
|
|
"name": "APT",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "APT"
|
|
}
|
|
},
|
|
{
|
|
"id": "Quasar",
|
|
"name": "Quasar",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Quasar"
|
|
}
|
|
},
|
|
{
|
|
"id": "Java",
|
|
"name": "Java",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Java"
|
|
}
|
|
},
|
|
{
|
|
"id": "MAC",
|
|
"name": "MAC",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "MAC"
|
|
}
|
|
},
|
|
{
|
|
"id": "PII",
|
|
"name": "PII",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PII"
|
|
}
|
|
},
|
|
{
|
|
"id": "early 2018",
|
|
"name": "early 2018",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "early 2018"
|
|
}
|
|
},
|
|
{
|
|
"id": "early 2017",
|
|
"name": "early 2017",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "early 2017"
|
|
}
|
|
},
|
|
{
|
|
"id": "Society for Worldwide Interbank Financial Telecommunication",
|
|
"name": "Society for Worldwide Interbank Financial Telecommunication",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Society for Worldwide Interbank Financial Telecommunication"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows Registry",
|
|
"name": "Windows Registry",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows Registry"
|
|
}
|
|
},
|
|
{
|
|
"id": "Task",
|
|
"name": "Task",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Task"
|
|
}
|
|
},
|
|
{
|
|
"id": "li>Significant",
|
|
"name": "li>Significant",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "li>significant"
|
|
}
|
|
},
|
|
{
|
|
"id": "IP",
|
|
"name": "IP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "IP"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=2514",
|
|
"name": "end_char=2514",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=2514"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='May 2015'",
|
|
"name": "Entity(text='May 2015'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='May 2015'"
|
|
}
|
|
},
|
|
{
|
|
"id": "May 2015'",
|
|
"name": "May 2015'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "May 2015'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Frutas",
|
|
"name": "Frutas",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "fruta"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=4132",
|
|
"name": "end_char=4132",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=4132"
|
|
}
|
|
},
|
|
{
|
|
"id": "APT",
|
|
"name": "APT",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "APT"
|
|
}
|
|
},
|
|
{
|
|
"id": "Quasar",
|
|
"name": "Quasar",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Quasar"
|
|
}
|
|
},
|
|
{
|
|
"id": "Java",
|
|
"name": "Java",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Java"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='MAC",
|
|
"name": "Entity(text='MAC",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='MAC"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=4752",
|
|
"name": "end_char=4752",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=4752"
|
|
}
|
|
},
|
|
{
|
|
"id": "MAC",
|
|
"name": "MAC",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "MAC"
|
|
}
|
|
},
|
|
{
|
|
"id": "PII",
|
|
"name": "PII",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PII"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='early 2018'",
|
|
"name": "Entity(text='early 2018'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "entity(text='early 2018'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='early 2017'",
|
|
"name": "Entity(text='early 2017'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "entity(text='early 2017'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Worldwide Interbank Financial Telecommunication'",
|
|
"name": "Worldwide Interbank Financial Telecommunication'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Worldwide Interbank Financial Telecommunication'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Registry",
|
|
"name": "Registry",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Registry"
|
|
}
|
|
},
|
|
{
|
|
"id": "IP",
|
|
"name": "IP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "IP"
|
|
}
|
|
},
|
|
{
|
|
"id": "The United Kingdom National Cyber Security Centre",
|
|
"name": "The United Kingdom National Cyber Security Centre",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "the United Kingdom National Cyber Security Centre"
|
|
}
|
|
},
|
|
{
|
|
"id": "UK",
|
|
"name": "UK",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "UK"
|
|
}
|
|
},
|
|
{
|
|
"id": "China",
|
|
"name": "China",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China"
|
|
}
|
|
},
|
|
{
|
|
"id": ">China Chopper",
|
|
"name": ">China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": ">China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": ">China Chopper",
|
|
"name": ">China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": ">China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "2869",
|
|
"name": "2869",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2869"
|
|
}
|
|
},
|
|
{
|
|
"id": "United Kingdom National Cyber Security Centre'",
|
|
"name": "United Kingdom National Cyber Security Centre'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "United Kingdom National Cyber Security Centre'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=7491",
|
|
"name": "end_char=7491",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=7491"
|
|
}
|
|
},
|
|
{
|
|
"id": "the United Kingdom National Cyber Security Centre'",
|
|
"name": "the United Kingdom National Cyber Security Centre'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "the United Kingdom National Cyber Security Centre'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "UK",
|
|
"name": "UK",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "UK"
|
|
}
|
|
},
|
|
{
|
|
"id": "China",
|
|
"name": "China",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='>China Chopper'",
|
|
"name": "Entity(text='>China Chopper'",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='>China Chopper'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "summer 2018",
|
|
"name": "summer 2018",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "summer 2018"
|
|
}
|
|
},
|
|
{
|
|
"id": "CVE-2017-3066",
|
|
"name": "CVE-2017-3066",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "CVE-2017-3066"
|
|
}
|
|
},
|
|
{
|
|
"id": "Adobe ColdFusion",
|
|
"name": "Adobe ColdFusion",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Adobe ColdFusion"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "1327",
|
|
"name": "1327",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "1327"
|
|
}
|
|
},
|
|
{
|
|
"id": "2018",
|
|
"name": "2018",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2018"
|
|
}
|
|
},
|
|
{
|
|
"id": "summer 2018'",
|
|
"name": "summer 2018'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "summer 2018'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='CVE-2017-3066'",
|
|
"name": "Entity(text='CVE-2017-3066'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='CVE-2017-3066'"
|
|
}
|
|
},
|
|
{
|
|
"id": "ColdFusion",
|
|
"name": "ColdFusion",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "ColdFusion"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='second",
|
|
"name": "Entity(text='second",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='second"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://owasp.org",
|
|
"name": "href=\"https://owasp.org",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://owasp.org"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "Transport Layer Security",
|
|
"name": "Transport Layer Security",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Transport Layer Security"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "China Chopper",
|
|
"name": "China Chopper",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "China Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "Linux",
|
|
"name": "Linux",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Linux"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows",
|
|
"name": "Windows",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://cloud.google.com",
|
|
"name": "href=\"https://cloud.google.com",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://cloud.google.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "Hypertext Preprocessor",
|
|
"name": "Hypertext Preprocessor",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Hypertext Preprocessor"
|
|
}
|
|
},
|
|
{
|
|
"id": "PHP",
|
|
"name": "PHP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PHP"
|
|
}
|
|
},
|
|
{
|
|
"id": "1543",
|
|
"name": "1543",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "1543"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=11131",
|
|
"name": "end_char=11131",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=11131"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "Chopper",
|
|
"name": "Chopper",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Chopper"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://cloud.google.com",
|
|
"name": "href=\"https://cloud.google.com",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://cloud.google.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "Preprocessor'",
|
|
"name": "Preprocessor'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Preprocessor'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=12304",
|
|
"name": "end_char=12304",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=12304"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "PHP",
|
|
"name": "PHP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PHP"
|
|
}
|
|
},
|
|
{
|
|
"id": "PHP",
|
|
"name": "PHP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PHP"
|
|
}
|
|
},
|
|
{
|
|
"id": "2007",
|
|
"name": "2007",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2007"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Local Security Authority Subsystem Service",
|
|
"name": "Local Security Authority Subsystem Service",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Local Security Authority Subsystem Service"
|
|
}
|
|
},
|
|
{
|
|
"id": "recent years",
|
|
"name": "recent years",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "recent year"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "1092",
|
|
"name": "1092",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "1092"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "PHP",
|
|
"name": "PHP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PHP"
|
|
}
|
|
},
|
|
{
|
|
"id": "2007",
|
|
"name": "2007",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2007"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=12962",
|
|
"name": "end_char=12962",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=12962"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Security Authority Subsystem Service'",
|
|
"name": "Security Authority Subsystem Service'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Security Authority Subsystem Service'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=13436",
|
|
"name": "end_char=13436",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=13436"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell Empire",
|
|
"name": "PowerShell Empire",
|
|
"type": "GPE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell Empire"
|
|
}
|
|
},
|
|
{
|
|
"id": "Local Area Network",
|
|
"name": "Local Area Network",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Local Area Network"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows XP",
|
|
"name": "Windows XP",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows XP"
|
|
}
|
|
},
|
|
{
|
|
"id": "2003",
|
|
"name": "2003",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2003"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell",
|
|
"name": "PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "Invoke-Mimikatz",
|
|
"name": "Invoke-Mimikatz",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Invoke-Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "several years",
|
|
"name": "several years",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "several year"
|
|
}
|
|
},
|
|
{
|
|
"id": "2011",
|
|
"name": "2011",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2011"
|
|
}
|
|
},
|
|
{
|
|
"id": "DigiNotar",
|
|
"name": "DigiNotar",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "DigiNotar"
|
|
}
|
|
},
|
|
{
|
|
"id": "a month",
|
|
"name": "a month",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "a month"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "NotPetya",
|
|
"name": "NotPetya",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "NotPetya"
|
|
}
|
|
},
|
|
{
|
|
"id": "BadRabbit",
|
|
"name": "BadRabbit",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "BadRabbit"
|
|
}
|
|
},
|
|
{
|
|
"id": "2017",
|
|
"name": "2017",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2017"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows 8.1/Server",
|
|
"name": "Windows 8.1/Server",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows 8.1/Server"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://support.microsoft.com",
|
|
"name": "href=\"https://support.microsoft.com",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://support.microsoft.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "2014-93434251-04ac",
|
|
"name": "2014-93434251-04ac",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2014-93434251-04ac"
|
|
}
|
|
},
|
|
{
|
|
"id": "target=\"_blank",
|
|
"name": "target=\"_blank",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "target=\"_blank"
|
|
}
|
|
},
|
|
{
|
|
"id": "May 13",
|
|
"name": "May 13",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "May 13"
|
|
}
|
|
},
|
|
{
|
|
"id": "Credential Guard.</p>\\n",
|
|
"name": "Credential Guard.</p>\\n",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Credential Guard.</p>\\n"
|
|
}
|
|
},
|
|
{
|
|
"id": ">Credential Guard",
|
|
"name": ">Credential Guard",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": ">Credential Guard"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows Hardware Compatibility Program Specifications",
|
|
"name": "Windows Hardware Compatibility Program Specifications",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows Hardware Compatibility Program Specifications"
|
|
}
|
|
},
|
|
{
|
|
"id": "2016",
|
|
"name": "2016",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2016"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows Server Semi-Annual",
|
|
"name": "Windows Server Semi-Annual",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows Server Semi-annual"
|
|
}
|
|
},
|
|
{
|
|
"id": "li",
|
|
"name": "li",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "li"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://learn.microsoft.com",
|
|
"name": "href=\"https://learn.microsoft.com",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://learn.microsoft.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows 10",
|
|
"name": "Windows 10",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows 10"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows",
|
|
"name": "Windows",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows"
|
|
}
|
|
},
|
|
{
|
|
"id": "4769",
|
|
"name": "4769",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "4769"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=14141",
|
|
"name": "end_char=14141",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=14141"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=14305",
|
|
"name": "end_char=14305",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=14305"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='PowerShell Empire'",
|
|
"name": "Entity(text='PowerShell Empire'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='PowerShell Empire'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Area Network'",
|
|
"name": "Area Network'",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Area Network'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=14911",
|
|
"name": "end_char=14911",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=14911"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "XP",
|
|
"name": "XP",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "XP"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "2003",
|
|
"name": "2003",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2003"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='PowerShell",
|
|
"name": "Entity(text='PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell",
|
|
"name": "PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "Invoke-Mimikatz'",
|
|
"name": "Invoke-Mimikatz'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Invoke-Mimikatz'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "several year'",
|
|
"name": "several year'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "several year'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=15614",
|
|
"name": "end_char=15614",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=15614"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=15736",
|
|
"name": "end_char=15736",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=15736"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='NotPetya",
|
|
"name": "Entity(text='NotPetya",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='NotPetya"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "NotPetya",
|
|
"name": "NotPetya",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "NotPetya"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=15962",
|
|
"name": "end_char=15962",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=15962"
|
|
}
|
|
},
|
|
{
|
|
"id": "BadRabbit",
|
|
"name": "BadRabbit",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "BadRabbit"
|
|
}
|
|
},
|
|
{
|
|
"id": "2017",
|
|
"name": "2017",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2017"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=16742, confidence=1.0, metadata={'extraction_method",
|
|
"name": "end_char=16742, confidence=1.0, metadata={'extraction_method",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=16742, confidence=1.0, metadata={'extraction_method"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://support.microsoft.com",
|
|
"name": "href=\"https://support.microsoft.com",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://support.microsoft.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "2014-93434251-04ac'",
|
|
"name": "2014-93434251-04ac'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2014-93434251-04ac'"
|
|
}
|
|
},
|
|
{
|
|
"id": "May 13'",
|
|
"name": "May 13'",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "May 13'"
|
|
}
|
|
},
|
|
{
|
|
"id": "label='LAW",
|
|
"name": "label='LAW",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "label='law"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Credential Guard.</p>\\n",
|
|
"name": "Credential Guard.</p>\\n",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "credential guard.</p>\\n"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=17635",
|
|
"name": "end_char=17635",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=17635"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Hardware Compatibility Program Specifications'",
|
|
"name": "Hardware Compatibility Program Specifications'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Hardware Compatibility Program Specifications'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows Hardware Compatibility Program Specifications'",
|
|
"name": "Windows Hardware Compatibility Program Specifications'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows Hardware Compatibility Program Specifications'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='2016'",
|
|
"name": "Entity(text='2016'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='2016'"
|
|
}
|
|
},
|
|
{
|
|
"id": "2016",
|
|
"name": "2016",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "2016"
|
|
}
|
|
},
|
|
{
|
|
"id": "Server Semi-Annual'",
|
|
"name": "Server Semi-Annual'",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Server Semi-annual'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=17759",
|
|
"name": "end_char=17759",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=17759"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=17817",
|
|
"name": "end_char=17817",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=17817"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=17919",
|
|
"name": "end_char=17919",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=17919"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "href=\"https://learn.microsoft.com",
|
|
"name": "href=\"https://learn.microsoft.com",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "href=\"https://learn.microsoft.com"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=18149",
|
|
"name": "end_char=18149",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=18149"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Local Administrator Password Solution",
|
|
"name": "Local Administrator Password Solution",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Local Administrator Password Solution"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Windows",
|
|
"name": "Windows",
|
|
"type": "LOC",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Windows"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft Advanced Threat Analytics",
|
|
"name": "Microsoft Advanced Threat Analytics",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft Advanced Threat Analytics"
|
|
}
|
|
},
|
|
{
|
|
"id": "Numerous Mimikatz",
|
|
"name": "Numerous Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Numerous Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Wherever Mimikatz",
|
|
"name": "Wherever Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "wherever Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "1546",
|
|
"name": "1546",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "1546"
|
|
}
|
|
},
|
|
{
|
|
"id": "Password Solution'",
|
|
"name": "Password Solution'",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Password Solution'"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft",
|
|
"name": "Microsoft",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft"
|
|
}
|
|
},
|
|
{
|
|
"id": "Advanced Threat Analytics'",
|
|
"name": "Advanced Threat Analytics'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Advanced Threat Analytics'"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=18856",
|
|
"name": "end_char=18856",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=18856"
|
|
}
|
|
},
|
|
{
|
|
"id": "Microsoft Advanced Threat Analytics'",
|
|
"name": "Microsoft Advanced Threat Analytics'",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Microsoft Advanced Threat Analytics'"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "start_char=18999",
|
|
"name": "start_char=18999",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "start_char=18999"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=19016",
|
|
"name": "end_char=19016",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=19016"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=19540",
|
|
"name": "end_char=19540",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=19540"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Active Directory",
|
|
"name": "Active Directory",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Active Directory"
|
|
}
|
|
},
|
|
{
|
|
"id": "Securing Active",
|
|
"name": "Securing Active",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Securing Active"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell",
|
|
"name": "PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": ">Lateral Movement Framework",
|
|
"name": ">Lateral Movement Framework",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": ">Lateral Movement Framework"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell",
|
|
"name": "PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "1133",
|
|
"name": "1133",
|
|
"type": "DATE",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "1133"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
},
|
|
{
|
|
"id": "Directory",
|
|
"name": "Directory",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Directory"
|
|
}
|
|
},
|
|
{
|
|
"id": "Entity(text='PowerShell",
|
|
"name": "Entity(text='PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Entity(text='PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=20611",
|
|
"name": "end_char=20611",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=20611"
|
|
}
|
|
},
|
|
{
|
|
"id": "confidence=1.0",
|
|
"name": "confidence=1.0",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "confidence=1.0"
|
|
}
|
|
},
|
|
{
|
|
"id": "PowerShell",
|
|
"name": "PowerShell",
|
|
"type": "ORG",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "PowerShell"
|
|
}
|
|
},
|
|
{
|
|
"id": "end_char=20690",
|
|
"name": "end_char=20690",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "end_char=20690"
|
|
}
|
|
},
|
|
{
|
|
"id": "Mimikatz",
|
|
"name": "Mimikatz",
|
|
"type": "PERSON",
|
|
"confidence": 1.0,
|
|
"metadata": {
|
|
"extraction_method": "ml",
|
|
"model": "en_core_web_sm",
|
|
"lemma": "Mimikatz"
|
|
}
|
|
}
|
|
],
|
|
"relationships": [
|
|
{
|
|
"source": "Australia",
|
|
"target": "Canada",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Australia",
|
|
"target": "New Zealand",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 10
|
|
}
|
|
},
|
|
{
|
|
"source": "Australia",
|
|
"target": "the United Kingdom",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 23
|
|
}
|
|
},
|
|
{
|
|
"source": "Australia",
|
|
"target": "United States.[1][2][3][4][5]</p>\\n",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 51
|
|
}
|
|
},
|
|
{
|
|
"source": "Canada",
|
|
"target": "New Zealand",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Canada",
|
|
"target": "the United Kingdom",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 15
|
|
}
|
|
},
|
|
{
|
|
"source": "Canada",
|
|
"target": "United States.[1][2][3][4][5]</p>\\n",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 43
|
|
}
|
|
},
|
|
{
|
|
"source": "New Zealand",
|
|
"target": "the United Kingdom",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "New Zealand",
|
|
"target": "United States.[1][2][3][4][5]</p>\\n",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 30
|
|
}
|
|
},
|
|
{
|
|
"source": "the United Kingdom",
|
|
"target": "United States.[1][2][3][4][5]</p>\\n",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 10
|
|
}
|
|
},
|
|
{
|
|
"source": "li>Webshell",
|
|
"target": "China",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Australia",
|
|
"target": "Entity(text='Canada",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Australia",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 70
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='Canada",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 46
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Canada",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Entity(text='New Zealand'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 87
|
|
}
|
|
},
|
|
{
|
|
"source": "Canada",
|
|
"target": "Entity(text='New Zealand'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "New Zealand'",
|
|
"target": "Entity(text='the United Kingdom'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 4
|
|
}
|
|
},
|
|
{
|
|
"source": "New Zealand'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 81
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='the United Kingdom'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 45
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "the United Kingdom'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=482",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=482",
|
|
"target": "China",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "China",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "May 2015",
|
|
"target": "Frutas",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 85
|
|
}
|
|
},
|
|
{
|
|
"source": "Advanced Persistent Threat",
|
|
"target": "APT",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Advanced Persistent Threat",
|
|
"target": "Quasar",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 86
|
|
}
|
|
},
|
|
{
|
|
"source": "APT",
|
|
"target": "Quasar",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 81
|
|
}
|
|
},
|
|
{
|
|
"source": "early 2017",
|
|
"target": "Society for Worldwide Interbank Financial Telecommunication",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 89
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Registry",
|
|
"target": "Task",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 11
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Registry",
|
|
"target": "li>Significant",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 32
|
|
}
|
|
},
|
|
{
|
|
"source": "Task",
|
|
"target": "li>Significant",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 17
|
|
}
|
|
},
|
|
{
|
|
"source": "Frutas",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 79
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='MAC",
|
|
"target": "end_char=4752",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=4752",
|
|
"target": "MAC",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "PII",
|
|
"target": "Entity(text='early 2018'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "PII",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 77
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='early 2018'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 48
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Entity(text='early 2017'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 91
|
|
}
|
|
},
|
|
{
|
|
"source": "Worldwide Interbank Financial Telecommunication'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 47
|
|
}
|
|
},
|
|
{
|
|
"source": "The United Kingdom National Cyber Security Centre",
|
|
"target": "UK",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": ">China Chopper",
|
|
"target": "China Chopper",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 30
|
|
}
|
|
},
|
|
{
|
|
"source": "China Chopper",
|
|
"target": "China Chopper",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 52
|
|
}
|
|
},
|
|
{
|
|
"source": "2869",
|
|
"target": "United Kingdom National Cyber Security Centre'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 52
|
|
}
|
|
},
|
|
{
|
|
"source": "United Kingdom National Cyber Security Centre'",
|
|
"target": "end_char=7491",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 32
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=7491",
|
|
"target": "the United Kingdom National Cyber Security Centre'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "the United Kingdom National Cyber Security Centre'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 67
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "UK",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "China",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 79
|
|
}
|
|
},
|
|
{
|
|
"source": "Chopper",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 51
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Entity(text='>China Chopper'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 82
|
|
}
|
|
},
|
|
{
|
|
"source": "summer 2018",
|
|
"target": "CVE-2017-3066",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 90
|
|
}
|
|
},
|
|
{
|
|
"source": "CVE-2017-3066",
|
|
"target": "Adobe ColdFusion",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 90
|
|
}
|
|
},
|
|
{
|
|
"source": "1327",
|
|
"target": "2018",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 54
|
|
}
|
|
},
|
|
{
|
|
"source": "summer 2018'",
|
|
"target": "Entity(text='CVE-2017-3066'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 4
|
|
}
|
|
},
|
|
{
|
|
"source": "href=\"https://owasp.org",
|
|
"target": "China Chopper",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 93
|
|
}
|
|
},
|
|
{
|
|
"source": "Transport Layer Security",
|
|
"target": "China Chopper",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 97
|
|
}
|
|
},
|
|
{
|
|
"source": "Linux",
|
|
"target": "Windows",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Linux",
|
|
"target": "href=\"https://cloud.google.com",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 42
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows",
|
|
"target": "href=\"https://cloud.google.com",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 30
|
|
}
|
|
},
|
|
{
|
|
"source": "Hypertext Preprocessor",
|
|
"target": "PHP",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=11131",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "href=\"https://cloud.google.com",
|
|
"target": "Preprocessor'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 28
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=12304",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=12304",
|
|
"target": "PHP",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "PHP",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "recent years",
|
|
"type": "use",
|
|
"confidence": 0.8,
|
|
"metadata": {
|
|
"extraction_method": "dependency",
|
|
"dependency_path": "ROOT -> ... -> pobj"
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "PowerShell Empire",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 82
|
|
}
|
|
},
|
|
{
|
|
"source": "Local Area Network",
|
|
"target": "Windows XP",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 72
|
|
}
|
|
},
|
|
{
|
|
"source": "Local Area Network",
|
|
"target": "2003",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 84
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows XP",
|
|
"target": "2003",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 40
|
|
}
|
|
},
|
|
{
|
|
"source": "Invoke-Mimikatz",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 21
|
|
}
|
|
},
|
|
{
|
|
"source": "several years",
|
|
"target": "2011",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "DigiNotar",
|
|
"target": "a month",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 87
|
|
}
|
|
},
|
|
{
|
|
"source": "a month",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 44
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "NotPetya",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 59
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "BadRabbit",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 72
|
|
}
|
|
},
|
|
{
|
|
"source": "NotPetya",
|
|
"target": "BadRabbit",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "NotPetya",
|
|
"target": "2017",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 37
|
|
}
|
|
},
|
|
{
|
|
"source": "BadRabbit",
|
|
"target": "2017",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 23
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 10
|
|
}
|
|
},
|
|
{
|
|
"source": "2014-93434251-04ac",
|
|
"target": "target=\"_blank",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 25
|
|
}
|
|
},
|
|
{
|
|
"source": "target=\"_blank",
|
|
"target": "May 13",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 95
|
|
}
|
|
},
|
|
{
|
|
"source": "Credential Guard.</p>\\n",
|
|
"target": ">Credential Guard",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Credential Guard.</p>\\n",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 85
|
|
}
|
|
},
|
|
{
|
|
"source": "Credential Guard.</p>\\n",
|
|
"target": "Windows Hardware Compatibility Program Specifications",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 97
|
|
}
|
|
},
|
|
{
|
|
"source": ">Credential Guard",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 66
|
|
}
|
|
},
|
|
{
|
|
"source": ">Credential Guard",
|
|
"target": "Windows Hardware Compatibility Program Specifications",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 78
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "Windows Hardware Compatibility Program Specifications",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 3
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "2016",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 89
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "Windows Server Semi-Annual",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 98
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Hardware Compatibility Program Specifications",
|
|
"target": "2016",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Hardware Compatibility Program Specifications",
|
|
"target": "Windows Server Semi-Annual",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 42
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Hardware Compatibility Program Specifications",
|
|
"target": "li",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 88
|
|
}
|
|
},
|
|
{
|
|
"source": "2016",
|
|
"target": "Windows Server Semi-Annual",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "2016",
|
|
"target": "li",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 51
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Server Semi-Annual",
|
|
"target": "li",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 20
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "href=\"https://learn.microsoft.com",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 6
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows 10",
|
|
"target": "Windows",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "end_char=14141",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 63
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=14141",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "end_char=14305",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 63
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=14305",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Entity(text='PowerShell Empire'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Area Network'",
|
|
"target": "end_char=14911",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "Area Network'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 49
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=14911",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "XP",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 50
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "2003",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Entity(text='PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Invoke-Mimikatz'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 78
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 82
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "several year'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "several year'",
|
|
"target": "end_char=15614",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 56
|
|
}
|
|
},
|
|
{
|
|
"source": "several year'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 72
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=15614",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=15736",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Entity(text='NotPetya",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 5
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='NotPetya",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 50
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "NotPetya",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "NotPetya",
|
|
"target": "end_char=15962",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 61
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=15962",
|
|
"target": "BadRabbit",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "end_char=16742, confidence=1.0, metadata={'extraction_method",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 61
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=16742, confidence=1.0, metadata={'extraction_method",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 46
|
|
}
|
|
},
|
|
{
|
|
"source": "May 13'",
|
|
"target": "label='LAW",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 30
|
|
}
|
|
},
|
|
{
|
|
"source": "May 13'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 77
|
|
}
|
|
},
|
|
{
|
|
"source": "label='LAW",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 37
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Credential Guard.</p>\\n",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "Credential Guard.</p>\\n",
|
|
"target": "end_char=17635",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 80
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=17635",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft",
|
|
"target": "Hardware Compatibility Program Specifications'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 26
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows Hardware Compatibility Program Specifications'",
|
|
"target": "Entity(text='2016'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 4
|
|
}
|
|
},
|
|
{
|
|
"source": "2016",
|
|
"target": "Server Semi-Annual'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 26
|
|
}
|
|
},
|
|
{
|
|
"source": "2016",
|
|
"target": "end_char=17759",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 78
|
|
}
|
|
},
|
|
{
|
|
"source": "2016",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 94
|
|
}
|
|
},
|
|
{
|
|
"source": "Server Semi-Annual'",
|
|
"target": "end_char=17759",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "Server Semi-Annual'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 49
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=17759",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=17919",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=17919",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "href=\"https://learn.microsoft.com",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 78
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=18149",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Local Administrator Password Solution",
|
|
"target": "Microsoft",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 6
|
|
}
|
|
},
|
|
{
|
|
"source": "Windows",
|
|
"target": "Microsoft Advanced Threat Analytics",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 16
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Wherever Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 68
|
|
}
|
|
},
|
|
{
|
|
"source": "1546",
|
|
"target": "Password Solution'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 68
|
|
}
|
|
},
|
|
{
|
|
"source": "Password Solution'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 49
|
|
}
|
|
},
|
|
{
|
|
"source": "Advanced Threat Analytics'",
|
|
"target": "end_char=18856",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 33
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=18856",
|
|
"target": "Microsoft Advanced Threat Analytics'",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft Advanced Threat Analytics'",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 26
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft Advanced Threat Analytics'",
|
|
"target": "start_char=18999",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 53
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft Advanced Threat Analytics'",
|
|
"target": "end_char=19016",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 71
|
|
}
|
|
},
|
|
{
|
|
"source": "Microsoft Advanced Threat Analytics'",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 87
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "start_char=18999",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 19
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "end_char=19016",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 37
|
|
}
|
|
},
|
|
{
|
|
"source": "start_char=18999",
|
|
"target": "end_char=19016",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "start_char=18999",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 18
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=19016",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 27
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "end_char=19540",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 72
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=19540",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Securing Active",
|
|
"target": "PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 91
|
|
}
|
|
},
|
|
{
|
|
"source": "PowerShell",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 71
|
|
}
|
|
},
|
|
{
|
|
"source": ">Lateral Movement Framework",
|
|
"target": "PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "Mimikatz",
|
|
"target": "Directory",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 25
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='PowerShell",
|
|
"target": "end_char=20611",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 34
|
|
}
|
|
},
|
|
{
|
|
"source": "Entity(text='PowerShell",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 50
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=20611",
|
|
"target": "confidence=1.0",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 2
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=20611",
|
|
"target": "PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
},
|
|
{
|
|
"source": "confidence=1.0",
|
|
"target": "PowerShell",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 76
|
|
}
|
|
},
|
|
{
|
|
"source": "PowerShell",
|
|
"target": "end_char=20690",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 63
|
|
}
|
|
},
|
|
{
|
|
"source": "end_char=20690",
|
|
"target": "Mimikatz",
|
|
"type": "related_to",
|
|
"confidence": 0.6,
|
|
"metadata": {
|
|
"extraction_method": "co_occurrence",
|
|
"distance": 92
|
|
}
|
|
}
|
|
],
|
|
"nodes": [],
|
|
"edges": [],
|
|
"metadata": {
|
|
"exported_at": "2025-12-30T18:16:22.478658",
|
|
"num_entities": 289,
|
|
"num_relationships": 176,
|
|
"temporal_enabled": false,
|
|
"timestamp": "2025-12-30T16:55:17.999740",
|
|
"entity_resolution_applied": false,
|
|
"format": "json"
|
|
}
|
|
} |