Files
semantica/cookbook/use_cases/intelligence/criminal_network.json
T

4956 lines
112 KiB
JSON

{
"entities": [
{
"id": "Chunk(text='<div>\\n",
"name": "Chunk(text='<div>\\n",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "chunk(text='<div>\\n"
}
},
{
"id": "Australia",
"name": "Australia",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Australia"
}
},
{
"id": "Canada",
"name": "Canada",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Canada"
}
},
{
"id": "New Zealand",
"name": "New Zealand",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "New Zealand"
}
},
{
"id": "the United Kingdom",
"name": "the United Kingdom",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "the United Kingdom"
}
},
{
"id": "United States.[1][2][3][4][5]</p>\\n",
"name": "United States.[1][2][3][4][5]</p>\\n",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "United States.[1][2][3][4][5]</p>\\n"
}
},
{
"id": "li>Webshell",
"name": "li>Webshell",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "li>Webshell"
}
},
{
"id": "China",
"name": "China",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China"
}
},
{
"id": "li>C2 Obfuscation",
"name": "li>C2 Obfuscation",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "li>C2 Obfuscation"
}
},
{
"id": "Australia",
"name": "Australia",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Australia"
}
},
{
"id": "Entity(text='Canada",
"name": "Entity(text='Canada",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='Canada"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Canada",
"name": "Canada",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Canada"
}
},
{
"id": "Entity(text='New Zealand'",
"name": "Entity(text='New Zealand'",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='New Zealand'"
}
},
{
"id": "New Zealand'",
"name": "New Zealand'",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "New Zealand'"
}
},
{
"id": "Entity(text='the United Kingdom'",
"name": "Entity(text='the United Kingdom'",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "entity(text='the United Kingdom'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "the United Kingdom'",
"name": "the United Kingdom'",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "the United Kingdom'"
}
},
{
"id": "end_char=482",
"name": "end_char=482",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=482"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "China",
"name": "China",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China"
}
},
{
"id": "Today",
"name": "Today",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "today"
}
},
{
"id": "today",
"name": "today",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "today"
}
},
{
"id": "May 2015",
"name": "May 2015",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "May 2015"
}
},
{
"id": "Frutas",
"name": "Frutas",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Frutas"
}
},
{
"id": "Wireshark",
"name": "Wireshark",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Wireshark"
}
},
{
"id": "Advanced Persistent Threat",
"name": "Advanced Persistent Threat",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Advanced Persistent Threat"
}
},
{
"id": "APT",
"name": "APT",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "APT"
}
},
{
"id": "Quasar",
"name": "Quasar",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Quasar"
}
},
{
"id": "Java",
"name": "Java",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Java"
}
},
{
"id": "MAC",
"name": "MAC",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "MAC"
}
},
{
"id": "PII",
"name": "PII",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PII"
}
},
{
"id": "early 2018",
"name": "early 2018",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "early 2018"
}
},
{
"id": "early 2017",
"name": "early 2017",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "early 2017"
}
},
{
"id": "Society for Worldwide Interbank Financial Telecommunication",
"name": "Society for Worldwide Interbank Financial Telecommunication",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Society for Worldwide Interbank Financial Telecommunication"
}
},
{
"id": "Windows Registry",
"name": "Windows Registry",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows Registry"
}
},
{
"id": "Task",
"name": "Task",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Task"
}
},
{
"id": "li>Significant",
"name": "li>Significant",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "li>significant"
}
},
{
"id": "IP",
"name": "IP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "IP"
}
},
{
"id": "end_char=2514",
"name": "end_char=2514",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=2514"
}
},
{
"id": "Entity(text='May 2015'",
"name": "Entity(text='May 2015'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='May 2015'"
}
},
{
"id": "May 2015'",
"name": "May 2015'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "May 2015'"
}
},
{
"id": "Frutas",
"name": "Frutas",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "fruta"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "end_char=4132",
"name": "end_char=4132",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=4132"
}
},
{
"id": "APT",
"name": "APT",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "APT"
}
},
{
"id": "Quasar",
"name": "Quasar",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Quasar"
}
},
{
"id": "Java",
"name": "Java",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Java"
}
},
{
"id": "Entity(text='MAC",
"name": "Entity(text='MAC",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='MAC"
}
},
{
"id": "end_char=4752",
"name": "end_char=4752",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=4752"
}
},
{
"id": "MAC",
"name": "MAC",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "MAC"
}
},
{
"id": "PII",
"name": "PII",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PII"
}
},
{
"id": "Entity(text='early 2018'",
"name": "Entity(text='early 2018'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "entity(text='early 2018'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Entity(text='early 2017'",
"name": "Entity(text='early 2017'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "entity(text='early 2017'"
}
},
{
"id": "Worldwide Interbank Financial Telecommunication'",
"name": "Worldwide Interbank Financial Telecommunication'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Worldwide Interbank Financial Telecommunication'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Registry",
"name": "Registry",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Registry"
}
},
{
"id": "IP",
"name": "IP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "IP"
}
},
{
"id": "The United Kingdom National Cyber Security Centre",
"name": "The United Kingdom National Cyber Security Centre",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "the United Kingdom National Cyber Security Centre"
}
},
{
"id": "UK",
"name": "UK",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "UK"
}
},
{
"id": "China",
"name": "China",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China"
}
},
{
"id": ">China Chopper",
"name": ">China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": ">China Chopper"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": ">China Chopper",
"name": ">China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": ">China Chopper"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "2869",
"name": "2869",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2869"
}
},
{
"id": "United Kingdom National Cyber Security Centre'",
"name": "United Kingdom National Cyber Security Centre'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "United Kingdom National Cyber Security Centre'"
}
},
{
"id": "end_char=7491",
"name": "end_char=7491",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=7491"
}
},
{
"id": "the United Kingdom National Cyber Security Centre'",
"name": "the United Kingdom National Cyber Security Centre'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "the United Kingdom National Cyber Security Centre'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "UK",
"name": "UK",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "UK"
}
},
{
"id": "China",
"name": "China",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Entity(text='>China Chopper'",
"name": "Entity(text='>China Chopper'",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='>China Chopper'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "summer 2018",
"name": "summer 2018",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "summer 2018"
}
},
{
"id": "CVE-2017-3066",
"name": "CVE-2017-3066",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "CVE-2017-3066"
}
},
{
"id": "Adobe ColdFusion",
"name": "Adobe ColdFusion",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Adobe ColdFusion"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "1327",
"name": "1327",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "1327"
}
},
{
"id": "2018",
"name": "2018",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2018"
}
},
{
"id": "summer 2018'",
"name": "summer 2018'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "summer 2018'"
}
},
{
"id": "Entity(text='CVE-2017-3066'",
"name": "Entity(text='CVE-2017-3066'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='CVE-2017-3066'"
}
},
{
"id": "ColdFusion",
"name": "ColdFusion",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "ColdFusion"
}
},
{
"id": "Entity(text='second",
"name": "Entity(text='second",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='second"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "href=\"https://owasp.org",
"name": "href=\"https://owasp.org",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://owasp.org"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "Transport Layer Security",
"name": "Transport Layer Security",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Transport Layer Security"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "China Chopper",
"name": "China Chopper",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "China Chopper"
}
},
{
"id": "Linux",
"name": "Linux",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Linux"
}
},
{
"id": "Windows",
"name": "Windows",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows"
}
},
{
"id": "href=\"https://cloud.google.com",
"name": "href=\"https://cloud.google.com",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://cloud.google.com"
}
},
{
"id": "Hypertext Preprocessor",
"name": "Hypertext Preprocessor",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Hypertext Preprocessor"
}
},
{
"id": "PHP",
"name": "PHP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PHP"
}
},
{
"id": "1543",
"name": "1543",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "1543"
}
},
{
"id": "end_char=11131",
"name": "end_char=11131",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=11131"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "Chopper",
"name": "Chopper",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Chopper"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "href=\"https://cloud.google.com",
"name": "href=\"https://cloud.google.com",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://cloud.google.com"
}
},
{
"id": "Preprocessor'",
"name": "Preprocessor'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Preprocessor'"
}
},
{
"id": "end_char=12304",
"name": "end_char=12304",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=12304"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "PHP",
"name": "PHP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PHP"
}
},
{
"id": "PHP",
"name": "PHP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PHP"
}
},
{
"id": "2007",
"name": "2007",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2007"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Local Security Authority Subsystem Service",
"name": "Local Security Authority Subsystem Service",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Local Security Authority Subsystem Service"
}
},
{
"id": "recent years",
"name": "recent years",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "recent year"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "1092",
"name": "1092",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "1092"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "PHP",
"name": "PHP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PHP"
}
},
{
"id": "2007",
"name": "2007",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2007"
}
},
{
"id": "end_char=12962",
"name": "end_char=12962",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=12962"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Security Authority Subsystem Service'",
"name": "Security Authority Subsystem Service'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Security Authority Subsystem Service'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "end_char=13436",
"name": "end_char=13436",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=13436"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "PowerShell Empire",
"name": "PowerShell Empire",
"type": "GPE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell Empire"
}
},
{
"id": "Local Area Network",
"name": "Local Area Network",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Local Area Network"
}
},
{
"id": "Windows XP",
"name": "Windows XP",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows XP"
}
},
{
"id": "2003",
"name": "2003",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2003"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "PowerShell",
"name": "PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell"
}
},
{
"id": "Invoke-Mimikatz",
"name": "Invoke-Mimikatz",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Invoke-Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "several years",
"name": "several years",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "several year"
}
},
{
"id": "2011",
"name": "2011",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2011"
}
},
{
"id": "DigiNotar",
"name": "DigiNotar",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "DigiNotar"
}
},
{
"id": "a month",
"name": "a month",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "a month"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "NotPetya",
"name": "NotPetya",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "NotPetya"
}
},
{
"id": "BadRabbit",
"name": "BadRabbit",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "BadRabbit"
}
},
{
"id": "2017",
"name": "2017",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2017"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Windows 8.1/Server",
"name": "Windows 8.1/Server",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows 8.1/Server"
}
},
{
"id": "href=\"https://support.microsoft.com",
"name": "href=\"https://support.microsoft.com",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://support.microsoft.com"
}
},
{
"id": "2014-93434251-04ac",
"name": "2014-93434251-04ac",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2014-93434251-04ac"
}
},
{
"id": "target=\"_blank",
"name": "target=\"_blank",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "target=\"_blank"
}
},
{
"id": "May 13",
"name": "May 13",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "May 13"
}
},
{
"id": "Credential Guard.</p>\\n",
"name": "Credential Guard.</p>\\n",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Credential Guard.</p>\\n"
}
},
{
"id": ">Credential Guard",
"name": ">Credential Guard",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": ">Credential Guard"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Windows Hardware Compatibility Program Specifications",
"name": "Windows Hardware Compatibility Program Specifications",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows Hardware Compatibility Program Specifications"
}
},
{
"id": "2016",
"name": "2016",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2016"
}
},
{
"id": "Windows Server Semi-Annual",
"name": "Windows Server Semi-Annual",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows Server Semi-annual"
}
},
{
"id": "li",
"name": "li",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "li"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "href=\"https://learn.microsoft.com",
"name": "href=\"https://learn.microsoft.com",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://learn.microsoft.com"
}
},
{
"id": "Windows 10",
"name": "Windows 10",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows 10"
}
},
{
"id": "Windows",
"name": "Windows",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows"
}
},
{
"id": "4769",
"name": "4769",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "4769"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "end_char=14141",
"name": "end_char=14141",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=14141"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "end_char=14305",
"name": "end_char=14305",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=14305"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Entity(text='PowerShell Empire'",
"name": "Entity(text='PowerShell Empire'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='PowerShell Empire'"
}
},
{
"id": "Area Network'",
"name": "Area Network'",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Area Network'"
}
},
{
"id": "end_char=14911",
"name": "end_char=14911",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=14911"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "XP",
"name": "XP",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "XP"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "2003",
"name": "2003",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2003"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Entity(text='PowerShell",
"name": "Entity(text='PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='PowerShell"
}
},
{
"id": "PowerShell",
"name": "PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell"
}
},
{
"id": "Invoke-Mimikatz'",
"name": "Invoke-Mimikatz'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Invoke-Mimikatz'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "several year'",
"name": "several year'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "several year'"
}
},
{
"id": "end_char=15614",
"name": "end_char=15614",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=15614"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "end_char=15736",
"name": "end_char=15736",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=15736"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Entity(text='NotPetya",
"name": "Entity(text='NotPetya",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='NotPetya"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "NotPetya",
"name": "NotPetya",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "NotPetya"
}
},
{
"id": "end_char=15962",
"name": "end_char=15962",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=15962"
}
},
{
"id": "BadRabbit",
"name": "BadRabbit",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "BadRabbit"
}
},
{
"id": "2017",
"name": "2017",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2017"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "end_char=16742, confidence=1.0, metadata={'extraction_method",
"name": "end_char=16742, confidence=1.0, metadata={'extraction_method",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=16742, confidence=1.0, metadata={'extraction_method"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "href=\"https://support.microsoft.com",
"name": "href=\"https://support.microsoft.com",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://support.microsoft.com"
}
},
{
"id": "2014-93434251-04ac'",
"name": "2014-93434251-04ac'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2014-93434251-04ac'"
}
},
{
"id": "May 13'",
"name": "May 13'",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "May 13'"
}
},
{
"id": "label='LAW",
"name": "label='LAW",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "label='law"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Credential Guard.</p>\\n",
"name": "Credential Guard.</p>\\n",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "credential guard.</p>\\n"
}
},
{
"id": "end_char=17635",
"name": "end_char=17635",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=17635"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Hardware Compatibility Program Specifications'",
"name": "Hardware Compatibility Program Specifications'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Hardware Compatibility Program Specifications'"
}
},
{
"id": "Windows Hardware Compatibility Program Specifications'",
"name": "Windows Hardware Compatibility Program Specifications'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows Hardware Compatibility Program Specifications'"
}
},
{
"id": "Entity(text='2016'",
"name": "Entity(text='2016'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='2016'"
}
},
{
"id": "2016",
"name": "2016",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "2016"
}
},
{
"id": "Server Semi-Annual'",
"name": "Server Semi-Annual'",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Server Semi-annual'"
}
},
{
"id": "end_char=17759",
"name": "end_char=17759",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=17759"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "end_char=17817",
"name": "end_char=17817",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=17817"
}
},
{
"id": "end_char=17919",
"name": "end_char=17919",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=17919"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "href=\"https://learn.microsoft.com",
"name": "href=\"https://learn.microsoft.com",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "href=\"https://learn.microsoft.com"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "end_char=18149",
"name": "end_char=18149",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=18149"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Local Administrator Password Solution",
"name": "Local Administrator Password Solution",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Local Administrator Password Solution"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Windows",
"name": "Windows",
"type": "LOC",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Windows"
}
},
{
"id": "Microsoft Advanced Threat Analytics",
"name": "Microsoft Advanced Threat Analytics",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft Advanced Threat Analytics"
}
},
{
"id": "Numerous Mimikatz",
"name": "Numerous Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Numerous Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Wherever Mimikatz",
"name": "Wherever Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "wherever Mimikatz"
}
},
{
"id": "1546",
"name": "1546",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "1546"
}
},
{
"id": "Password Solution'",
"name": "Password Solution'",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Password Solution'"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Microsoft",
"name": "Microsoft",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft"
}
},
{
"id": "Advanced Threat Analytics'",
"name": "Advanced Threat Analytics'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Advanced Threat Analytics'"
}
},
{
"id": "end_char=18856",
"name": "end_char=18856",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=18856"
}
},
{
"id": "Microsoft Advanced Threat Analytics'",
"name": "Microsoft Advanced Threat Analytics'",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Microsoft Advanced Threat Analytics'"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "start_char=18999",
"name": "start_char=18999",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "start_char=18999"
}
},
{
"id": "end_char=19016",
"name": "end_char=19016",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=19016"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "end_char=19540",
"name": "end_char=19540",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=19540"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Active Directory",
"name": "Active Directory",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Active Directory"
}
},
{
"id": "Securing Active",
"name": "Securing Active",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Securing Active"
}
},
{
"id": "PowerShell",
"name": "PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": ">Lateral Movement Framework",
"name": ">Lateral Movement Framework",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": ">Lateral Movement Framework"
}
},
{
"id": "PowerShell",
"name": "PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell"
}
},
{
"id": "1133",
"name": "1133",
"type": "DATE",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "1133"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
},
{
"id": "Directory",
"name": "Directory",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Directory"
}
},
{
"id": "Entity(text='PowerShell",
"name": "Entity(text='PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Entity(text='PowerShell"
}
},
{
"id": "end_char=20611",
"name": "end_char=20611",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=20611"
}
},
{
"id": "confidence=1.0",
"name": "confidence=1.0",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "confidence=1.0"
}
},
{
"id": "PowerShell",
"name": "PowerShell",
"type": "ORG",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "PowerShell"
}
},
{
"id": "end_char=20690",
"name": "end_char=20690",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "end_char=20690"
}
},
{
"id": "Mimikatz",
"name": "Mimikatz",
"type": "PERSON",
"confidence": 1.0,
"metadata": {
"extraction_method": "ml",
"model": "en_core_web_sm",
"lemma": "Mimikatz"
}
}
],
"relationships": [
{
"source": "Australia",
"target": "Canada",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Australia",
"target": "New Zealand",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 10
}
},
{
"source": "Australia",
"target": "the United Kingdom",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 23
}
},
{
"source": "Australia",
"target": "United States.[1][2][3][4][5]</p>\\n",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 51
}
},
{
"source": "Canada",
"target": "New Zealand",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Canada",
"target": "the United Kingdom",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 15
}
},
{
"source": "Canada",
"target": "United States.[1][2][3][4][5]</p>\\n",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 43
}
},
{
"source": "New Zealand",
"target": "the United Kingdom",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "New Zealand",
"target": "United States.[1][2][3][4][5]</p>\\n",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 30
}
},
{
"source": "the United Kingdom",
"target": "United States.[1][2][3][4][5]</p>\\n",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 10
}
},
{
"source": "li>Webshell",
"target": "China",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Australia",
"target": "Entity(text='Canada",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Australia",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 70
}
},
{
"source": "Entity(text='Canada",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 46
}
},
{
"source": "confidence=1.0",
"target": "Canada",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "confidence=1.0",
"target": "Entity(text='New Zealand'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 87
}
},
{
"source": "Canada",
"target": "Entity(text='New Zealand'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "New Zealand'",
"target": "Entity(text='the United Kingdom'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 4
}
},
{
"source": "New Zealand'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 81
}
},
{
"source": "Entity(text='the United Kingdom'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 45
}
},
{
"source": "confidence=1.0",
"target": "the United Kingdom'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "end_char=482",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=482",
"target": "China",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "confidence=1.0",
"target": "China",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "May 2015",
"target": "Frutas",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 85
}
},
{
"source": "Advanced Persistent Threat",
"target": "APT",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Advanced Persistent Threat",
"target": "Quasar",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 86
}
},
{
"source": "APT",
"target": "Quasar",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 81
}
},
{
"source": "early 2017",
"target": "Society for Worldwide Interbank Financial Telecommunication",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 89
}
},
{
"source": "Windows Registry",
"target": "Task",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 11
}
},
{
"source": "Windows Registry",
"target": "li>Significant",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 32
}
},
{
"source": "Task",
"target": "li>Significant",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 17
}
},
{
"source": "Frutas",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 79
}
},
{
"source": "Entity(text='MAC",
"target": "end_char=4752",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "end_char=4752",
"target": "MAC",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "PII",
"target": "Entity(text='early 2018'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "PII",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 77
}
},
{
"source": "Entity(text='early 2018'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 48
}
},
{
"source": "confidence=1.0",
"target": "Entity(text='early 2017'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 91
}
},
{
"source": "Worldwide Interbank Financial Telecommunication'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 47
}
},
{
"source": "The United Kingdom National Cyber Security Centre",
"target": "UK",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": ">China Chopper",
"target": "China Chopper",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 30
}
},
{
"source": "China Chopper",
"target": "China Chopper",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 52
}
},
{
"source": "2869",
"target": "United Kingdom National Cyber Security Centre'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 52
}
},
{
"source": "United Kingdom National Cyber Security Centre'",
"target": "end_char=7491",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 32
}
},
{
"source": "end_char=7491",
"target": "the United Kingdom National Cyber Security Centre'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "the United Kingdom National Cyber Security Centre'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 67
}
},
{
"source": "confidence=1.0",
"target": "UK",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "China",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 79
}
},
{
"source": "Chopper",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 51
}
},
{
"source": "confidence=1.0",
"target": "Entity(text='>China Chopper'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 82
}
},
{
"source": "summer 2018",
"target": "CVE-2017-3066",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 90
}
},
{
"source": "CVE-2017-3066",
"target": "Adobe ColdFusion",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 90
}
},
{
"source": "1327",
"target": "2018",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 54
}
},
{
"source": "summer 2018'",
"target": "Entity(text='CVE-2017-3066'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 4
}
},
{
"source": "href=\"https://owasp.org",
"target": "China Chopper",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 93
}
},
{
"source": "Transport Layer Security",
"target": "China Chopper",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 97
}
},
{
"source": "Linux",
"target": "Windows",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Linux",
"target": "href=\"https://cloud.google.com",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 42
}
},
{
"source": "Windows",
"target": "href=\"https://cloud.google.com",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 30
}
},
{
"source": "Hypertext Preprocessor",
"target": "PHP",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=11131",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "href=\"https://cloud.google.com",
"target": "Preprocessor'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 28
}
},
{
"source": "end_char=12304",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=12304",
"target": "PHP",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "confidence=1.0",
"target": "PHP",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "Mimikatz",
"target": "recent years",
"type": "use",
"confidence": 0.8,
"metadata": {
"extraction_method": "dependency",
"dependency_path": "ROOT -> ... -> pobj"
}
},
{
"source": "Mimikatz",
"target": "PowerShell Empire",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 82
}
},
{
"source": "Local Area Network",
"target": "Windows XP",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 72
}
},
{
"source": "Local Area Network",
"target": "2003",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 84
}
},
{
"source": "Windows XP",
"target": "2003",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Mimikatz",
"target": "PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 40
}
},
{
"source": "Invoke-Mimikatz",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 21
}
},
{
"source": "several years",
"target": "2011",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "DigiNotar",
"target": "a month",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 87
}
},
{
"source": "a month",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 44
}
},
{
"source": "Mimikatz",
"target": "NotPetya",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 59
}
},
{
"source": "Mimikatz",
"target": "BadRabbit",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 72
}
},
{
"source": "NotPetya",
"target": "BadRabbit",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "NotPetya",
"target": "2017",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 37
}
},
{
"source": "BadRabbit",
"target": "2017",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 23
}
},
{
"source": "Microsoft",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "Mimikatz",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 10
}
},
{
"source": "2014-93434251-04ac",
"target": "target=\"_blank",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 25
}
},
{
"source": "target=\"_blank",
"target": "May 13",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 95
}
},
{
"source": "Credential Guard.</p>\\n",
"target": ">Credential Guard",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Credential Guard.</p>\\n",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 85
}
},
{
"source": "Credential Guard.</p>\\n",
"target": "Windows Hardware Compatibility Program Specifications",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 97
}
},
{
"source": ">Credential Guard",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 66
}
},
{
"source": ">Credential Guard",
"target": "Windows Hardware Compatibility Program Specifications",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 78
}
},
{
"source": "Microsoft",
"target": "Windows Hardware Compatibility Program Specifications",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 3
}
},
{
"source": "Microsoft",
"target": "2016",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 89
}
},
{
"source": "Microsoft",
"target": "Windows Server Semi-Annual",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 98
}
},
{
"source": "Windows Hardware Compatibility Program Specifications",
"target": "2016",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "Windows Hardware Compatibility Program Specifications",
"target": "Windows Server Semi-Annual",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 42
}
},
{
"source": "Windows Hardware Compatibility Program Specifications",
"target": "li",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 88
}
},
{
"source": "2016",
"target": "Windows Server Semi-Annual",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "2016",
"target": "li",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 51
}
},
{
"source": "Windows Server Semi-Annual",
"target": "li",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 20
}
},
{
"source": "Microsoft",
"target": "href=\"https://learn.microsoft.com",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 6
}
},
{
"source": "Windows 10",
"target": "Windows",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Mimikatz",
"target": "end_char=14141",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 63
}
},
{
"source": "end_char=14141",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "Mimikatz",
"target": "end_char=14305",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 63
}
},
{
"source": "end_char=14305",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "Mimikatz",
"target": "Entity(text='PowerShell Empire'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Area Network'",
"target": "end_char=14911",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "Area Network'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 49
}
},
{
"source": "end_char=14911",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "XP",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 50
}
},
{
"source": "confidence=1.0",
"target": "2003",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "Mimikatz",
"target": "Entity(text='PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Invoke-Mimikatz'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 78
}
},
{
"source": "confidence=1.0",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "Mimikatz",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 82
}
},
{
"source": "confidence=1.0",
"target": "several year'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "several year'",
"target": "end_char=15614",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 56
}
},
{
"source": "several year'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 72
}
},
{
"source": "end_char=15614",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=15736",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Mimikatz",
"target": "Entity(text='NotPetya",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 5
}
},
{
"source": "Entity(text='NotPetya",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 50
}
},
{
"source": "confidence=1.0",
"target": "NotPetya",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "NotPetya",
"target": "end_char=15962",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 61
}
},
{
"source": "end_char=15962",
"target": "BadRabbit",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "Mimikatz",
"target": "end_char=16742, confidence=1.0, metadata={'extraction_method",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 61
}
},
{
"source": "end_char=16742, confidence=1.0, metadata={'extraction_method",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 46
}
},
{
"source": "May 13'",
"target": "label='LAW",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 30
}
},
{
"source": "May 13'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 77
}
},
{
"source": "label='LAW",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 37
}
},
{
"source": "confidence=1.0",
"target": "Credential Guard.</p>\\n",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "Credential Guard.</p>\\n",
"target": "end_char=17635",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 80
}
},
{
"source": "end_char=17635",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "Microsoft",
"target": "Hardware Compatibility Program Specifications'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 26
}
},
{
"source": "Windows Hardware Compatibility Program Specifications'",
"target": "Entity(text='2016'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 4
}
},
{
"source": "2016",
"target": "Server Semi-Annual'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 26
}
},
{
"source": "2016",
"target": "end_char=17759",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 78
}
},
{
"source": "2016",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 94
}
},
{
"source": "Server Semi-Annual'",
"target": "end_char=17759",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "Server Semi-Annual'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 49
}
},
{
"source": "end_char=17759",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=17919",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=17919",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "confidence=1.0",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "href=\"https://learn.microsoft.com",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 78
}
},
{
"source": "end_char=18149",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Local Administrator Password Solution",
"target": "Microsoft",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 6
}
},
{
"source": "Windows",
"target": "Microsoft Advanced Threat Analytics",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 16
}
},
{
"source": "Mimikatz",
"target": "Wherever Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 68
}
},
{
"source": "1546",
"target": "Password Solution'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 68
}
},
{
"source": "Password Solution'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 49
}
},
{
"source": "Advanced Threat Analytics'",
"target": "end_char=18856",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 33
}
},
{
"source": "end_char=18856",
"target": "Microsoft Advanced Threat Analytics'",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "Microsoft Advanced Threat Analytics'",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 26
}
},
{
"source": "Microsoft Advanced Threat Analytics'",
"target": "start_char=18999",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 53
}
},
{
"source": "Microsoft Advanced Threat Analytics'",
"target": "end_char=19016",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 71
}
},
{
"source": "Microsoft Advanced Threat Analytics'",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 87
}
},
{
"source": "Mimikatz",
"target": "start_char=18999",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 19
}
},
{
"source": "Mimikatz",
"target": "end_char=19016",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 37
}
},
{
"source": "start_char=18999",
"target": "end_char=19016",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "start_char=18999",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 18
}
},
{
"source": "end_char=19016",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Mimikatz",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 27
}
},
{
"source": "Mimikatz",
"target": "end_char=19540",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 72
}
},
{
"source": "end_char=19540",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Securing Active",
"target": "PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 91
}
},
{
"source": "PowerShell",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 71
}
},
{
"source": ">Lateral Movement Framework",
"target": "PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "Mimikatz",
"target": "Directory",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 25
}
},
{
"source": "Entity(text='PowerShell",
"target": "end_char=20611",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 34
}
},
{
"source": "Entity(text='PowerShell",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 50
}
},
{
"source": "end_char=20611",
"target": "confidence=1.0",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 2
}
},
{
"source": "end_char=20611",
"target": "PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
},
{
"source": "confidence=1.0",
"target": "PowerShell",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 76
}
},
{
"source": "PowerShell",
"target": "end_char=20690",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 63
}
},
{
"source": "end_char=20690",
"target": "Mimikatz",
"type": "related_to",
"confidence": 0.6,
"metadata": {
"extraction_method": "co_occurrence",
"distance": 92
}
}
],
"nodes": [],
"edges": [],
"metadata": {
"exported_at": "2025-12-30T18:16:22.478658",
"num_entities": 289,
"num_relationships": 176,
"temporal_enabled": false,
"timestamp": "2025-12-30T16:55:17.999740",
"entity_resolution_applied": false,
"format": "json"
}
}