Tesla Kubernetes Breach.afb

{"version":"2.0.1","id":"130cfa8f-3152-4a3e-bd99-6f4230907dad","schema":{"page_template":"flow","templates":[{"id":"@__builtin__page","type":7,"role":0,"grid":[10,10],"properties":{"name":{"type":2,"value":"Untitled Document","is_primary":true}},"style":{"grid_color":"#1d1d1d","background_color":"#141414","drop_shadow":{"color":"rgba(0,0,0,.4)","offset":[3,3]}}},{"id":"@__builtin__anchor","type":0,"role":0,"radius":10,"line_templates":{"0":"@__builtin__line_horizontal_elbow","1":"@__builtin__line_vertical_elbow"},"style":{"color":"rgba(255, 255, 255, 0.25)"}},{"id":"@__builtin__line_handle","type":4,"role":0,"style":{"radius":6,"fill_color":"#fedb22","stroke_color":"#141414","stroke_width":1.5}},{"id":"@__builtin__line_source","type":3,"role":12288,"style":{"radius":6,"fill_color":"#fedb22","stroke_color":"#141414","stroke_width":1.5}},{"id":"@__builtin__line_target","type":3,"role":16384,"style":{"radius":6,"fill_color":"#fedb22","stroke_color":"#141414","stroke_width":1.5}},{"id":"@__builtin__line_horizontal_elbow","namespace":"horizontal_elbow","type":5,"role":8192,"hitbox_width":20,"line_handle_template":"@__builtin__line_handle","line_ending_template":{"source":"@__builtin__line_source","target":"@__builtin__line_target"},"style":{"width":5,"cap_size":16,"color":"#646464","select_color":"#646464"}},{"id":"@__builtin__line_vertical_elbow","namespace":"vertical_elbow","type":6,"role":8192,"hitbox_width":20,"line_handle_template":"@__builtin__line_handle","line_ending_template":{"source":"@__builtin__line_source","target":"@__builtin__line_target"},"style":{"width":5,"cap_size":16,"color":"#646464","select_color":"#646464"}},{"id":"flow","type":7,"role":4096,"grid":[10,10],"properties":{"name":{"type":2,"value":"Untitled Document","is_primary":true},"description":{"type":2},"author":{"type":6,"form":{"name":{"type":2,"is_primary":true},"identity_class":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["individual","Individual"],["group","Group"],["system","System"],["organization","Organization"],["class","Class"],["unknown","Unknown"]]}},"contact_information":{"type":2}}},"scope":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["incident","Incident"],["campaign","Campaign"],["threat-actor","Threat Actor"],["malware","Malware"],["other","Other"]]},"value":"incident"},"external_references":{"type":5,"form":{"type":6,"form":{"source_name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"url":{"type":2}}}},"created":{"type":3,"value":"2022-10-27T02:44:54.520Z","is_visible":false}},"style":{"grid_color":"#1d1d1d","background_color":"#141414","drop_shadow":{"color":"rgba(0,0,0,.4)","offset":[3,3]}}},{"id":"true_anchor","type":0,"role":0,"radius":10,"line_templates":{"0":"@__builtin__line_horizontal_elbow","1":"@__builtin__line_vertical_elbow"},"style":{"color":"rgba(255, 255, 255, 0.25)"}},{"id":"false_anchor","type":0,"role":0,"radius":10,"line_templates":{"0":"@__builtin__line_horizontal_elbow","1":"@__builtin__line_vertical_elbow"},"style":{"color":"rgba(255, 255, 255, 0.25)"}},{"id":"action","namespace":"attack_flow.action","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"tactic_id":{"type":2},"tactic_ref":{"type":2},"technique_id":{"type":2},"technique_ref":{"type":2},"description":{"type":2},"confidence":{"type":4,"options":{"type":5,"form":{"type":6,"form":{"text":{"type":2,"is_primary":true},"value":{"type":0}}},"value":[["speculative",{"text":"Speculative","value":0}],["very-doubtful",{"text":"Very Doubtful","value":10}],["doubtful",{"text":"Doubtful","value":30}],["even-odds",{"text":"Even Odds","value":50}],["probable",{"text":"Probable","value":70}],["very-probable",{"text":"Very Probable","value":90}],["certain",{"text":"Certain","value":100}]]},"value":null},"execution_start":{"type":3},"execution_end":{"type":3}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#637bc9","stroke_color":"#708ce6","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"asset","namespace":"attack_flow.asset","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#c26130","stroke_color":"#e57339","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"condition","namespace":"attack_flow.condition","type":1,"role":4096,"properties":{"description":{"type":2,"is_primary":true,"is_required":true},"pattern":{"type":2},"pattern_type":{"type":2},"pattern_version":{"type":2},"date":{"type":3}},"branches":[{"text":"True","anchor_template":"true_anchor"},{"text":"False","anchor_template":"false_anchor"}],"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#2a9642","stroke_color":"#32b34e","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"branch":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","vertical_padding":12,"horizontal_padding":30},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"or","namespace":"attack_flow.OR_operator","type":8,"role":4096,"properties":{"operator":{"type":2,"value":"OR","is_primary":true,"is_visible":false,"is_editable":false}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"fill_color":"#c94040","stroke_color":"#dd5050","text":{"font":{"family":"Inter","size":"14pt","weight":800},"color":"#d8d8d8","line_height":24},"border_radius":13,"select_outline":{"color":"#e6d845","padding":4,"border_radius":19},"anchor_markers":{"color":"#ffffff","size":3},"vertical_padding":18,"horizontal_padding":35}},{"id":"and","namespace":"attack_flow.AND_operator","type":8,"role":4096,"properties":{"operator":{"type":2,"value":"AND","is_primary":true,"is_visible":false,"is_editable":false}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"fill_color":"#c94040","stroke_color":"#dd5050","text":{"font":{"family":"Inter","size":"14pt","weight":800},"color":"#d8d8d8","line_height":24},"border_radius":13,"select_outline":{"color":"#e6d845","padding":4,"border_radius":19},"anchor_markers":{"color":"#ffffff","size":3},"vertical_padding":18,"horizontal_padding":35}},{"id":"attack_pattern","namespace":"stix_object.attack_pattern","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"aliases":{"type":5,"form":{"type":2}},"kill_chain_phases":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"campaign","namespace":"stix_object.campaign","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"aliases":{"type":5,"form":{"type":2}},"first_seen":{"type":3},"last_seen":{"type":3},"objective":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"course_of_action","namespace":"stix_object.course_of_action","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"action_type":{"type":2},"os_execution_envs":{"type":5,"form":{"type":2}},"action_bin":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"grouping","namespace":"stix_object.grouping","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true},"description":{"type":2},"context":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"identity","namespace":"stix_object.identity","type":2,"role":4096,"properties":{"name":{"type":2,"is_required":true,"is_primary":true},"description":{"type":2},"roles":{"type":5,"form":{"type":2}},"identity_class":{"type":2,"is_required":true},"sectors":{"type":5,"form":{"type":2}},"contact_information":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"indicator","namespace":"stix_object.indicator","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true},"description":{"type":2},"indicator_types":{"type":5,"form":{"type":2,"is_required":true}},"pattern":{"type":2,"is_required":true},"pattern_type":{"type":2,"is_required":true},"patter_version":{"type":2},"valid_from":{"type":3,"is_required":true},"valid_until":{"type":3},"kill_chain_phases":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"infrastructure","namespace":"stix_object.infrastructure","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"infrastructure_types":{"type":5,"form":{"type":2,"is_required":true}},"aliases":{"type":5,"form":{"type":2}},"kill_chain_phases":{"type":5,"form":{"type":2}},"first_seen":{"type":3},"last_seen":{"type":3}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"intrusion_set","namespace":"stix_object.intrusion_set","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"aliases":{"type":5,"form":{"type":2,"is_required":true}},"first_seen":{"type":3},"last_seen":{"type":3},"goals":{"type":5,"form":{"type":2}},"resource_level":{"type":2},"primary_motivation":{"type":2},"secondary_motivations":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"location","namespace":"stix_object.location","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true},"description":{"type":2},"latitude":{"type":1,"min":-90,"max":90},"longitude":{"type":1,"min":-180,"max":180},"precision":{"type":1},"region":{"type":2},"country":{"type":2},"administrative_area":{"type":2},"city":{"type":2},"street_address":{"type":2},"postal_code":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"malware","namespace":"stix_object.malware","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true},"description":{"type":2},"malware_types":{"type":5,"form":{"type":2,"is_required":true}},"is_family":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]},"is_required":true},"aliases":{"type":5,"form":{"type":2}},"kill_chain_phases":{"type":5,"form":{"type":2}},"first_seen":{"type":3},"last_seen":{"type":3},"os_execution_envs":{"type":5,"form":{"type":2}},"architecture_execution_envs":{"type":5,"form":{"type":2}},"implementation_languages":{"type":5,"form":{"type":2}},"capabilities":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"malware_analysis","namespace":"stix_object.malware_analysis","type":2,"role":4096,"properties":{"product":{"type":2,"is_primary":true,"is_required":true},"version":{"type":2},"configuration_version":{"type":2},"modules":{"type":5,"form":{"type":2}},"analysis_engine_version":{"type":2},"analysis_definition_version":{"type":2},"submitted":{"type":3},"analysis_started":{"type":3},"analysis_ended":{"type":3},"av_result":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"note","namespace":"stix_object.note","type":2,"role":4096,"properties":{"abstract":{"type":2,"is_primary":true},"content":{"type":2,"is_required":true},"authors":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"observed_data","namespace":"stix_object.observed_data","type":2,"role":4096,"properties":{"first_observed":{"type":3,"is_required":true},"last_observed":{"type":3,"is_required":true},"number_observed":{"type":0,"min":0,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"opinion","namespace":"stix_object.opinion","type":2,"role":4096,"properties":{"explanation":{"type":2,"is_primary":true},"authors":{"type":5,"form":{"type":2}},"opinion":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"report","namespace":"stix_object.report","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"report_types":{"type":5,"form":{"type":2,"is_required":true}},"published":{"type":3,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"threat_actor","namespace":"stix_object.threat_actor","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"threat_actor_types":{"type":5,"form":{"type":2,"is_required":true}},"aliases":{"type":5,"form":{"type":2}},"first_seen":{"type":3},"last_seen":{"type":3},"roles":{"type":5,"form":{"type":2}},"goals":{"type":5,"form":{"type":2}},"sophistication":{"type":2},"resource_level":{"type":2},"primary_motivation":{"type":2},"secondary_motivations":{"type":5,"form":{"type":2}},"personal_motivations":{"type":5,"form":{"type":2}}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"tool","namespace":"stix_object.tool","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2},"tool_types":{"type":5,"form":{"type":2,"is_required":true}},"aliases":{"type":5,"form":{"type":2}},"kill_chain_phases":{"type":5,"form":{"type":2}},"tool_version":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"vulnerability","namespace":"stix_object.vulnerability","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"description":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"artifact","namespace":"stix_observable.artifact","type":2,"role":4096,"properties":{"mime_type":{"type":2},"payload_bin":{"type":2},"url":{"type":2},"hashes":{"type":2},"encryption_algorithm":{"type":2},"decryption_key":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"autonomous_system","namespace":"stix_observable.autonomous_system","type":2,"role":4096,"properties":{"number":{"type":2,"is_primary":true,"is_required":true},"name":{"type":2},"rir":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"directory","namespace":"stix_observable.directory","type":2,"role":4096,"properties":{"path":{"type":2,"is_primary":true,"is_required":true},"path_enc":{"type":2},"ctime":{"type":3},"mtime":{"type":3},"atime":{"type":3}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"domain_name","namespace":"stix_observable.domain_name","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"email_address","namespace":"stix_observable.email_address","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true},"display_name":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"email_message","namespace":"stix_observable.email_message","type":2,"role":4096,"properties":{"is_multipart":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]},"is_required":true},"date":{"type":2},"content_type":{"type":2},"message_id":{"type":2},"subject":{"type":2,"is_primary":true},"received_lines":{"type":2},"additional_header_fields":{"type":2},"body":{"type":2},"body_multipart":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"file","namespace":"stix_observable.file","type":2,"role":4096,"properties":{"hashes":{"type":2},"size":{"type":2},"name":{"type":2,"is_primary":true},"name_enc":{"type":2},"magic_number_hex":{"type":2},"mime_type":{"type":2},"ctime":{"type":3},"mtime":{"type":3},"atime":{"type":3}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"ipv4_addr","namespace":"stix_observable.ipv4_addr","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"ipv6_address","namespace":"stix_observable.ipv6_address","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"mac_address","namespace":"stix_observable.mac_address","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"mutex","namespace":"stix_observable.mutex","type":2,"role":4096,"properties":{"name":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"network_traffic","namespace":"stix_observable.network_traffic","type":2,"role":4096,"properties":{"start":{"type":3},"end":{"type":3},"is_active":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"src_port":{"type":0,"min":0,"max":65535},"dst_port":{"type":0,"min":0,"max":65535},"protocols":{"type":5,"form":{"type":2,"is_required":true}},"src_byte_count":{"type":0,"min":0},"dst_byte_count":{"type":0,"min":0},"src_packets":{"type":0,"min":0},"dst_packets":{"type":0,"min":0},"ipfix":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"process","namespace":"stix_observable.process","type":2,"role":4096,"properties":{"is_hidden":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"pid":{"type":0,"min":0},"created_time":{"type":3},"cwd":{"type":2},"command_line":{"type":2,"is_required":true},"environment_variables":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"software","namespace":"stix_observable.software","type":2,"role":4096,"properties":{"name":{"type":2,"is_primary":true,"is_required":true},"cpe":{"type":2},"languages":{"type":5,"form":{"type":2}},"vendor":{"type":2},"version":{"type":2}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"url","namespace":"stix_observable.url","type":2,"role":4096,"properties":{"value":{"type":2,"is_required":true}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"user_account","namespace":"stix_observable.user_account","type":2,"role":4096,"properties":{"user_id":{"type":2},"credential":{"type":2},"account_login":{"type":2},"account_type":{"type":2},"display_name":{"type":2,"is_primary":true,"is_required":true},"is_service_account":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"is_privileged":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"can_escalate_privs":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"is_disabled":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"account_created":{"type":3},"account_expires":{"type":3},"credential_last_changed":{"type":3},"account_first_login":{"type":3},"account_last_login":{"type":3}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"windows_registry_key","namespace":"stix_observable.windows_registry_key","type":2,"role":4096,"properties":{"key":{"type":2,"is_primary":true},"values":{"type":5,"form":{"type":2}},"modified_time":{"type":3},"number_of_subkeys":{"type":0,"min":0}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}},{"id":"x509_certificate","namespace":"stix_observable.x509_certificate","type":2,"role":4096,"properties":{"subject":{"type":2,"is_primary":true,"is_required":true},"is_self_signed":{"type":4,"options":{"type":5,"form":{"type":2},"value":[["true","True"],["false","False"]]}},"hashes":{"type":2},"version":{"type":2},"serial_number":{"type":2},"signature_algorithm":{"type":2},"issuer":{"type":2},"validity_not_before":{"type":3},"validity_not_after":{"type":3},"subject_public_key_algorithm":{"type":2},"subject_public_key_modulus":{"type":2},"subject_public_key_exponent":{"type":0,"min":0}},"anchor_template":"@__builtin__anchor","style":{"max_width":320,"head":{"fill_color":"#737373","stroke_color":"#8c8c8c","one_title":{"title":{"font":{"family":"Inter","size":"10.5pt","weight":800},"color":"#d8d8d8"}},"two_title":{"title":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#d8d8d8","padding":8},"subtitle":{"font":{"family":"Inter","size":"13pt","weight":800},"color":"#d8d8d8","line_height":23}},"vertical_padding":14},"body":{"fill_color":"#1f1f1f","stroke_color":"#383838","field_name":{"font":{"family":"Inter","size":"8pt","weight":600},"color":"#b3b3b3","padding":12},"field_value":{"font":{"family":"Inter","size":"10.5pt"},"color":"#bfbfbf","line_height":20,"padding":22},"vertical_padding":18},"select_outline":{"color":"#e6d845","padding":4,"border_radius":9},"anchor_markers":{"color":"#ffffff","size":3},"border_radius":5,"horizontal_padding":20}}]},"objects":[{"id":"130cfa8f-3152-4a3e-bd99-6f4230907dad","x":-440,"y":-224,"attrs":0,"template":"flow","children":["394e0f5c-534b-406d-a714-60124f89e437","7edcb647-8d0c-4ba4-86e8-b2a423d9b43a","75e95326-aacc-4f05-aee3-3dc519aad4c6","307e4dc4-e109-4ef1-b0f5-7eaa7816ca25","3475ec81-5b70-4f9a-a9a9-9a089216ab44","5d19b518-7bcd-48d7-9d61-5e6001b130b1","9f352cc7-5e54-47ad-9275-874d76d4de0d","6f051fc8-7790-44c6-9cd4-44327e8f6fc5","b1a4ec2a-c3ae-45ec-a977-6bdfd3af5a48","fe5fea66-d2a1-4b41-a9eb-7f8eccf9704a","ec83e8c9-a209-47cb-aa05-52fae33182bb","837bede5-db2f-40ac-b4df-9798548de067","1bb561a2-3e77-4d54-8380-31e3493ff832","2523aded-6d9a-4f28-aea9-be9dd6f490e0","68edb689-f290-4a04-b3a5-bcae0e15ad87","db973ec8-9274-494a-8a01-1aef8e2ef555","c640ab9c-44db-4eb9-a73d-8cfcafb0d844","6a72efc4-29e1-4b28-afe5-86d5346973e2","7d02f022-e5dd-461a-b17b-ee25fb34304c","68c51612-0d5b-4052-9e90-91a41490cb2f","7af94412-6151-44d7-8071-0754ab71291b","c5d127a0-59be-4ab5-9266-4b3037c7bee3","b40e4081-13ab-4807-9d37-5f415931afbb","7ceac1cc-430a-47d3-8b71-2d95729bbf7d"],"properties":[["name","Tesla Kubernetes Breach"],["description","A cryptomining attack discovered on a Tesla kubernetes (k8s) cluster."],["author",[["name","Mark Haase"],["identity_class","23b79ae0fc0f07a3669598dd23c694cc"],["contact_information","mhaase@mitre.org"]]],["scope","3e072748feb6ecd1b1ba397704e009c0"],["external_references",[["3eb40d10db68e71fd89ff18988328888",[["source_name","The Cryptojacking Epidemic"],["description","RedLock CSI Team. Feb 20 2018."],["url","https://blog.redlock.io/cryptojacking-tesla"]]]]],["created","2022-10-27T02:44:54.520Z"]]},{"id":"394e0f5c-534b-406d-a714-60124f89e437","x":-220,"y":-980,"attrs":256,"template":"condition","children":["2afe074c-a3ab-4aac-85a5-f2847b0411cb","de706e02-3041-434d-8cc9-6d1be333c749","3689423d-4e2c-4b92-8de8-a59d15c2937b","c198b871-d702-45f6-ab5e-058eb6b42f32","d5f8a052-212a-471f-88e4-35f6c437c388","b2185809-142d-4b0b-bc46-89b73fb8d4a3","7804ef3a-f6b8-4ea7-9fdb-763c067182c1","62bf93f8-f0e1-44b1-9089-9f883cb4eafb","abfacf0f-f677-43d3-81a1-bc98b1c4e1f5","3a6d8cef-2667-406b-b18a-83d0b1df05f8","df864bd1-cd92-4078-9068-d2c35edba44a"],"properties":[["description","Tesla's Kubernetes dashboard is exposed to the public internet with no password required for access."],["pattern",null],["pattern_type",null],["pattern_version",null],["date",null]]},{"id":"7edcb647-8d0c-4ba4-86e8-b2a423d9b43a","x":-190,"y":-680,"attrs":256,"template":"action","children":["173cbde9-64b2-4c7f-bd7a-fe5feeeae4fd","475a975a-fdff-439a-ad5e-1aad55c8511b","e1154ada-25fd-48a2-85bb-80f2af404b28","beca9800-7c38-497c-bcac-1306b4594679","67b32715-f4c2-44e4-a0aa-47422abf494e","e4a97243-2e11-436a-b3f9-95df3d47550a","b498af3d-30c2-4b1f-8c16-78dc1abc0df1","f8b2e91c-e0a3-45bd-b80d-108caf9dd33d","5897b0ca-68eb-487f-93d8-541ce571bc22","ab8af044-a559-4c64-99bc-72aee2091c38","b9b23339-98e8-4ee8-837c-c8b861bb5f06","0afc495a-349d-4d40-ab61-a4abc3e9141c"],"properties":[["name","External Remote Services"],["tactic_id","TA0001"],["tactic_ref",null],["technique_id","T1133"],["technique_ref",null],["description","The adversary logs into the Kubernetes console."],["confidence","7f50b593fc42141161ce8dadf36e465c"],["execution_start",null],["execution_end",null]]},{"id":"75e95326-aacc-4f05-aee3-3dc519aad4c6","x":-247,"y":-871,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["e362fd5d-edbe-4ac7-aa82-c721dd9c1d09","2d99d599-5ae7-4378-a3e5-3b0893d25bd1","9e52bc34-9adf-475b-a3f6-2737c19a85ad"],"properties":[]},{"id":"307e4dc4-e109-4ef1-b0f5-7eaa7816ca25","x":60,"y":-290,"attrs":256,"template":"action","children":["a228e706-007d-498e-a43b-1692df05b6d3","28eb1bcf-c842-4217-a28f-90d9509c03ba","bbaa0bf0-682a-4025-9f89-9073bf46c5fb","bf5272ad-a244-42c8-baf6-00fba4249f4e","b2f6e377-1366-4e94-abce-8602854569a4","bd102034-5110-4e78-812d-08823aaeaded","bc754594-4d4a-4cd1-9bee-ea67057e16fe","844a4c04-d2ac-465b-b3ce-933cf20f0297","fd1bae45-05b4-4ae2-a6bd-db32ec343cce","90e75ca7-3622-4833-bfb5-03d967e8b8bd","d4d47b81-117a-40ed-b914-2e921c0fe2c8","e7055bdd-98b6-4821-b1f9-1acf15b2136b"],"properties":[["name","Unsecured Credentials: Credentials In Files"],["tactic_id","TA0006"],["tactic_ref",null],["technique_id","T1552.001"],["technique_ref",null],["description","The adversary can view plaintext AWS keys in the Kubernetes console."],["confidence","7fbf75fb1eb08d30a2ab9a9461cdf062"],["execution_start",null],["execution_end",null]]},{"id":"3475ec81-5b70-4f9a-a9a9-9a089216ab44","x":60,"y":100,"attrs":256,"template":"action","children":["6b291cc9-2d50-4bde-968c-bd8e827c5b9d","2a60e5df-4669-421c-8964-595015f229a4","af0f0e78-679a-45bc-8454-2b3e786c40ad","9e8968ee-dbf0-4f11-87da-23ba51e6bf92","eeb52b23-0162-46ce-86b5-c2a9b2deb279","f9fe6b1a-e13e-40a4-b91b-19825f2f981a","a752b11a-c9df-492d-bd25-5cfbc5fdc69c","e85a3cfb-af4e-4dfe-ad5e-3640e5ddf815","ba99a0fd-5205-41f4-adb8-f122715cb116","98bc3b47-0239-4110-a227-3641f6fb9aef","720d1e01-46c5-4806-afe5-d36ff0b4bdac","5acb3f40-5fc0-4b1a-bf41-71adb51e8d64"],"properties":[["name","Valid Accounts: Cloud Accounts"],["tactic_id","TA0004"],["tactic_ref",null],["technique_id","T1078.004"],["technique_ref",null],["description","The adversary authenticates to AWS S3 using the discovered credentials."],["confidence","7fbf75fb1eb08d30a2ab9a9461cdf062"],["execution_start",null],["execution_end",null]]},{"id":"5d19b518-7bcd-48d7-9d61-5e6001b130b1","x":60,"y":450,"attrs":256,"template":"action","children":["0fd3c9d9-1f20-45a1-bcbb-8fba6bc0f8cc","1b71f600-ec1d-45c2-808e-1fde7c01d6c6","e787a0e9-42e8-4f32-8b76-1b9377b6db9a","2a3a7eff-f3e3-48f9-b649-a177cc2f19d3","9309c7c8-744f-4604-bfb6-1111cb690c17","eafedf15-fc82-4353-b9f0-e487701746fc","844b7179-886f-43de-b1f1-e8b308a12aea","f0fba316-ed2b-403c-b951-22010ed89bf1","9e523efa-e02b-4000-a33c-a09f55be45fe","23f183a3-ebbc-48ea-b272-87d4375ff234","07490a92-e2c7-4c96-bf76-da81de02a204","eb7d898d-ea0c-4c1c-ae81-6a4014099b35"],"properties":[["name","Data from Cloud Storage Object"],["tactic_id","TA0009"],["tactic_ref",null],["technique_id","T1530"],["technique_ref",null],["description","The adversary can access data in private S3 buckets."],["confidence","7fbf75fb1eb08d30a2ab9a9461cdf062"],["execution_start",null],["execution_end",null]]},{"id":"9f352cc7-5e54-47ad-9275-874d76d4de0d","x":-28,"y":-491,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["22e180b2-8985-4025-8990-415797edbd0b","12ea7f1a-be21-485c-8979-fdf1c7369e78","feade46d-46ac-4d76-889c-b412f30b3b8a"],"properties":[]},{"id":"6f051fc8-7790-44c6-9cd4-44327e8f6fc5","x":60,"y":-89,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["60d7d144-4aff-44fd-b583-e7f928c7cd9a","18ada8dd-2998-421f-ae5d-dcb02bd49140","c10c4632-be45-4dcf-84c9-69a8f81a0576"],"properties":[]},{"id":"b1a4ec2a-c3ae-45ec-a977-6bdfd3af5a48","x":60,"y":275,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["f4bacdf4-137c-4a21-9b28-31a601870e82","f29942b0-f3c2-4104-a261-58be90db9961","c52cd5d2-5ffc-4663-af3d-87938265d67e"],"properties":[]},{"id":"fe5fea66-d2a1-4b41-a9eb-7f8eccf9704a","x":-440,"y":-300,"attrs":256,"template":"action","children":["499c6794-54ba-480c-81da-ff02ea70f962","a510e9e9-d230-4402-a58f-82677e9201dd","f60240d6-d3d8-4534-9b3c-8d1285817c4c","5fb28003-8afa-4812-886b-2918bf20609a","0aa22c63-fee0-44d2-80a8-17dd3a1adae0","462fde3b-0d6f-40a8-b0af-bfda36944a36","5db3cecb-4291-481b-8766-79ecc4ef2e80","75300a8a-f0e1-460c-bda7-38641b3ca387","e1d2866b-a565-4b07-b2ea-cf8c5dcc2460","64d78512-081c-4a98-9f88-f208df6a9179","aa52dfab-1a7e-466b-8d0f-d1189ac5dafd","4c773781-93d7-48b2-995e-1657b6a14035"],"properties":[["name","Deploy Container"],["tactic_id","TA0002"],["tactic_ref",null],["technique_id","T1610"],["technique_ref",null],["description","The adversary deploys a new container on the Kubernetes cluster."],["confidence","efe6b2c2589e25605d9f62170933c925"],["execution_start",null],["execution_end",null]]},{"id":"ec83e8c9-a209-47cb-aa05-52fae33182bb","x":-970,"y":-670,"attrs":256,"template":"action","children":["7698ddf5-d969-4e70-ae38-ba7f68e8d082","112f4e90-2143-470f-9eec-43447300cb99","d6d60880-9f58-4098-99fd-ebff4c5e5daf","5c55b722-e807-4532-a539-e2e6ff027378","6ae2ba2b-b5c9-4e90-8f14-a5672172baf2","0c9c685b-d2a3-4f09-ae17-321bfeb58089","ba40967b-b14c-4d4a-830a-4525fb06ba37","24134dc4-72f1-4060-af9e-26f43790a523","b08a1923-338c-409a-b316-4ac6ab43b688","0dd5b21b-0eb4-4263-9bff-ad2d2f4a87c1","80aa8ec7-ab09-4f3d-a01d-96fe3be16b96","d0b9d485-9aca-49a2-baa7-7ddf88c13970"],"properties":[["name","Acquire Infrastructure: Server"],["tactic_id","TA0042"],["tactic_ref",null],["technique_id","T1583.004"],["technique_ref",null],["description","The adversary sets up server[s] to run a cryptomining pool."],["confidence","7f50b593fc42141161ce8dadf36e465c"],["execution_start",null],["execution_end",null]]},{"id":"837bede5-db2f-40ac-b4df-9798548de067","x":-970,"y":-310,"attrs":256,"template":"action","children":["5512b64a-2e59-487f-8385-29cc2f3e3286","cabe6eed-adad-4acf-ab98-ec8671ccd03c","73ca58f2-3bf3-498f-848a-01e5f139de99","25e851bc-5c99-48d5-85bc-4cf767414bb7","9271b6e1-0268-4e36-af7e-c37dbb342272","6fb7edb2-b551-4e5e-aae3-550cd54ff0eb","db8dd69f-1dea-478f-9b3a-6429500956f6","07d58bf3-edc2-4ef1-bc96-ef969f962741","31628a45-8cca-410e-a880-21f7d2f5f847","f3dd85d5-a1b5-48fd-802b-57d2b2add1d6","5270a5e1-fd46-4cc2-9765-09c78b679186","a25fa8a0-6db2-4e8c-adf6-1c67d6d711b3"],"properties":[["name","Proxy"],["tactic_id","TA0011"],["tactic_ref",null],["technique_id","T1090"],["technique_ref",null],["description","The adversary proxies their mining pool through Cloudflare CDN."],["confidence","efe6b2c2589e25605d9f62170933c925"],["execution_start",null],["execution_end",null]]},{"id":"1bb561a2-3e77-4d54-8380-31e3493ff832","x":-970,"y":-490,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["a331a23f-66bf-46c2-94a9-35c40e7c92ab","fe0f549e-70d9-4e17-bb72-1c05f6e41de5","81d2b434-e590-401e-b9ff-b3ce8f214916"],"properties":[]},{"id":"2523aded-6d9a-4f28-aea9-be9dd6f490e0","x":-700,"y":-30,"attrs":256,"template":"and","children":["5104a439-f4b8-4eef-9031-7cab985135b5","e70b02c6-02ee-4ed9-9821-6ed63ea716fc","5db336f6-021d-4286-b44f-f0e030571b33","859dcb54-071f-4bff-84ec-7e9132dda9e2","090f8cc6-6adc-471f-9527-a3827bd18d2d","eec76a6f-eed6-4c2d-bd34-cf37c24363e9","eb8956e0-e619-4589-a553-073a79261456","24520312-c059-48c9-81e5-0e3e8859717f","0db25ec1-7a47-4e83-a3d2-22a74f19e450","873d3b1b-4f01-4f28-bed2-d8096059a44a","d436f10d-9d6a-417a-a84b-6dbb75bb08d1","d85d8223-ffea-44c2-9dad-3732a88b6ab9"],"properties":[["operator","AND"]]},{"id":"68edb689-f290-4a04-b3a5-bcae0e15ad87","x":-850,"y":-107,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["65ef7ed9-5dba-491b-bf0b-b9240fb3a83f","af17adbd-b939-4b09-8c73-ff1e60d6da93","5da3a7d0-7035-4acb-acc3-7d55bd2f3ffb"],"properties":[]},{"id":"db973ec8-9274-494a-8a01-1aef8e2ef555","x":-556,"y":-102,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["c675c97b-18b1-45bd-baf4-1a30844d6ee8","4fa9336d-2c73-45b7-8a90-51f8074dc795","7b95c4f6-0a94-4d60-a2b0-037f8a609c7a"],"properties":[]},{"id":"c640ab9c-44db-4eb9-a73d-8cfcafb0d844","x":-700,"y":200,"attrs":256,"template":"action","children":["58573954-a876-4a9f-a530-fd28be56ad6b","48624629-5ae1-492d-b7d8-d22cc66c5d10","7b204781-396b-4e83-9a02-dad2182ac0bd","839d6390-d76d-409c-9f1c-2d6960d7ce2b","b3744fb3-277c-4770-830d-4534f725a6ca","a3e3854a-b82f-4f97-80fe-ec4c53643de9","ffe1c7b3-2ed0-41a7-bfec-ce0f93edcae3","7bf6ca5e-d638-4f26-a0c8-31709b6e2e7c","30d9cc4b-84eb-4b9a-811c-80047d31654b","98bc70d8-d87d-49b5-90f0-a8579d754c5e","317636e7-0483-4484-8dff-11e2d93127b5","070e8c04-78a0-4bb8-9a34-7349ee6d9936"],"properties":[["name","Resource Highjacking"],["tactic_id","TA0040"],["tactic_ref",null],["technique_id","T1496"],["technique_ref",null],["description","The adversary runs cryptomining software in the container, configured to use their private mining pool."],["confidence","efe6b2c2589e25605d9f62170933c925"],["execution_start",null],["execution_end",null]]},{"id":"6a72efc4-29e1-4b28-afe5-86d5346973e2","x":-700,"y":16,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["c3a0b6e6-340f-4646-b460-921eca4efb64","999ae3a1-f417-4f70-8a04-cb875a8d4cdb","ccb03e75-99b8-4691-95c7-18782ae57590"],"properties":[]},{"id":"7d02f022-e5dd-461a-b17b-ee25fb34304c","x":-1420,"y":-50,"attrs":256,"template":"infrastructure","children":["a73fd4a0-9ba5-4db1-8240-aabfb3f5f974","c4d8b754-0d01-4307-9215-efecdef1cc9a","1c389837-4228-40c1-8448-519cf5daae28","25df69fd-a5aa-47ba-9d2c-c497525a09b6","2d1338f3-3ba2-4ec6-b313-eedf83cb2e22","5880019a-26e1-418c-a445-f3a1bf7c910d","5e13f39b-0082-4642-a3b0-ad34142cefac","0b8c07cc-145e-42a7-accd-8490cffd4dc0","4379f724-959a-4c22-82c1-a251e5d8440e","dbb649b9-6e25-4b48-bd7e-70100b412af2","702ce9a6-1185-4961-b16a-41a0c904cd9b","de8fda71-8cc1-491f-8c19-b854ef290180"],"properties":[["name","Unlisted mining pool"],["description","The mining pool is \"unlisted\" and runs on a non-standard port to evade common blocklists."],["infrastructure_types",[["02ce169eb2ed5da8dceb0579ec697bf9","unknown"]]],["aliases",[]],["kill_chain_phases",[]],["first_seen",null],["last_seen",null]]},{"id":"68c51612-0d5b-4052-9e90-91a41490cb2f","x":-1183,"y":-360,"attrs":0,"template":"@__builtin__line_horizontal_elbow","children":["23d08a55-cb8e-4a0d-a25e-3356b9832f26","d442dff5-b285-4237-bebd-de45e9d71e7c","cbe72159-80ea-4ce5-8df6-915e63994841"],"properties":[]},{"id":"7af94412-6151-44d7-8071-0754ab71291b","x":-1056,"y":100,"attrs":0,"template":"@__builtin__line_horizontal_elbow","children":["617601cf-99eb-4fa1-b1e8-aa180c17a5d2","24727396-5702-4e32-a8b1-7bbe3550c39a","db2ce7ec-8ea1-4518-9963-a16c7e0b3a9a"],"properties":[]},{"id":"c5d127a0-59be-4ab5-9266-4b3037c7bee3","x":540,"y":-290,"attrs":256,"template":"note","children":["a7991664-5673-4bc3-abec-d0071e1a2914","e426ccde-78e9-42a7-8513-4b98f65a9608","3d7f2dbe-0a20-4240-9d46-d737da6ffa1f","985322f1-bc16-4825-a8be-06187cd0d586","1a772b6a-00a5-4869-b80d-39ea7ac72d5a","a75122d9-894b-4a29-a85c-49a52ae7ec13","5c6d6bf2-a272-4a9d-902e-907a5be82bee","bed73720-5151-493f-b52a-82a67dc65ae8","64d83245-af64-4439-999c-3310a142413f","946aae6d-41ad-4a0d-b1c9-18e0bad29578","cc8101a0-39ef-4cb8-bff3-df49f65200a6","b7e2301b-514d-4211-842a-fd6dcd1cecbc"],"properties":[["abstract","Speculation"],["content","The authors of this post provided speculation about what the attackers could have done with the leaked credentials, but there is no evidence the adversaries even knew about the credentials."],["authors",[]]]},{"id":"b40e4081-13ab-4807-9d37-5f415931afbb","x":-353,"y":-490,"attrs":0,"template":"@__builtin__line_vertical_elbow","children":["1bf49fa6-1e33-4467-bf4e-4be94e5e21cb","9545054f-9514-4841-9956-c2def78b98de","ebf71ef8-22c6-4b64-b026-dbd895a7319b"],"properties":[]},{"id":"7ceac1cc-430a-47d3-8b71-2d95729bbf7d","x":298,"y":-290,"attrs":0,"template":"@__builtin__line_horizontal_elbow","children":["c57c9070-8d0e-4891-8520-6f38901f8435","65ebe83f-6e47-4b4c-8fcb-b621d2152b76","3155918f-8ee0-4859-ad3a-4e10ccb2864c"],"properties":[]},{"id":"2afe074c-a3ab-4aac-85a5-f2847b0411cb","x":-390,"y":-945,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"de706e02-3041-434d-8cc9-6d1be333c749","x":-390,"y":-980,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"3689423d-4e2c-4b92-8de8-a59d15c2937b","x":-390,"y":-1015,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"c198b871-d702-45f6-ab5e-058eb6b42f32","x":-305,"y":-1050,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"d5f8a052-212a-471f-88e4-35f6c437c388","x":-220,"y":-1050,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"b2185809-142d-4b0b-bc46-89b73fb8d4a3","x":-135,"y":-1050,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"7804ef3a-f6b8-4ea7-9fdb-763c067182c1","x":-49,"y":-1015,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"62bf93f8-f0e1-44b1-9089-9f883cb4eafb","x":-49,"y":-980,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"abfacf0f-f677-43d3-81a1-bc98b1c4e1f5","x":-49,"y":-945,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"3a6d8cef-2667-406b-b18a-83d0b1df05f8","x":-304,"y":-909,"attrs":0,"template":"true_anchor","children":["e362fd5d-edbe-4ac7-aa82-c721dd9c1d09"],"properties":[],"angle":1},{"id":"df864bd1-cd92-4078-9068-d2c35edba44a","x":-135,"y":-909,"attrs":0,"template":"false_anchor","children":[],"properties":[],"angle":1},{"id":"173cbde9-64b2-4c7f-bd7a-fe5feeeae4fd","x":-265.5,"y":-833,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"475a975a-fdff-439a-ad5e-1aad55c8511b","x":-190,"y":-833,"attrs":0,"template":"@__builtin__anchor","children":["9e52bc34-9adf-475b-a3f6-2737c19a85ad"],"properties":[],"angle":1},{"id":"e1154ada-25fd-48a2-85bb-80f2af404b28","x":-114.5,"y":-833,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"beca9800-7c38-497c-bcac-1306b4594679","x":-38,"y":-756.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"67b32715-f4c2-44e4-a0aa-47422abf494e","x":-38,"y":-680,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"e4a97243-2e11-436a-b3f9-95df3d47550a","x":-38,"y":-603.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"b498af3d-30c2-4b1f-8c16-78dc1abc0df1","x":-114.5,"y":-527,"attrs":0,"template":"@__builtin__anchor","children":["22e180b2-8985-4025-8990-415797edbd0b"],"properties":[],"angle":1},{"id":"f8b2e91c-e0a3-45bd-b80d-108caf9dd33d","x":-190,"y":-527,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"5897b0ca-68eb-487f-93d8-541ce571bc22","x":-265.5,"y":-527,"attrs":0,"template":"@__builtin__anchor","children":["1bf49fa6-1e33-4467-bf4e-4be94e5e21cb"],"properties":[],"angle":1},{"id":"ab8af044-a559-4c64-99bc-72aee2091c38","x":-341,"y":-603.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"b9b23339-98e8-4ee8-837c-c8b861bb5f06","x":-341,"y":-680,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"0afc495a-349d-4d40-ab61-a4abc3e9141c","x":-341,"y":-756.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"e362fd5d-edbe-4ac7-aa82-c721dd9c1d09","x":-304,"y":-909,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"2d99d599-5ae7-4378-a3e5-3b0893d25bd1","x":-247,"y":-871,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"9e52bc34-9adf-475b-a3f6-2737c19a85ad","x":-190,"y":-833,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"a228e706-007d-498e-a43b-1692df05b6d3","x":-27,"y":-454,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"28eb1bcf-c842-4217-a28f-90d9509c03ba","x":60,"y":-454,"attrs":0,"template":"@__builtin__anchor","children":["feade46d-46ac-4d76-889c-b412f30b3b8a"],"properties":[],"angle":1},{"id":"bbaa0bf0-682a-4025-9f89-9073bf46c5fb","x":147,"y":-454,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"bf5272ad-a244-42c8-baf6-00fba4249f4e","x":234,"y":-372,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"b2f6e377-1366-4e94-abce-8602854569a4","x":234,"y":-290,"attrs":0,"template":"@__builtin__anchor","children":["3155918f-8ee0-4859-ad3a-4e10ccb2864c"],"properties":[],"angle":0},{"id":"bd102034-5110-4e78-812d-08823aaeaded","x":234,"y":-208,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"bc754594-4d4a-4cd1-9bee-ea67057e16fe","x":147,"y":-125,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"844a4c04-d2ac-465b-b3ce-933cf20f0297","x":60,"y":-125,"attrs":0,"template":"@__builtin__anchor","children":["60d7d144-4aff-44fd-b583-e7f928c7cd9a"],"properties":[],"angle":1},{"id":"fd1bae45-05b4-4ae2-a6bd-db32ec343cce","x":-27,"y":-125,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"90e75ca7-3622-4833-bfb5-03d967e8b8bd","x":-114,"y":-208,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"d4d47b81-117a-40ed-b914-2e921c0fe2c8","x":-114,"y":-290,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"e7055bdd-98b6-4821-b1f9-1acf15b2136b","x":-114,"y":-372,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"6b291cc9-2d50-4bde-968c-bd8e827c5b9d","x":-26,"y":-53,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"2a60e5df-4669-421c-8964-595015f229a4","x":60,"y":-53,"attrs":0,"template":"@__builtin__anchor","children":["c10c4632-be45-4dcf-84c9-69a8f81a0576"],"properties":[],"angle":1},{"id":"af0f0e78-679a-45bc-8454-2b3e786c40ad","x":146,"y":-53,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"9e8968ee-dbf0-4f11-87da-23ba51e6bf92","x":233,"y":23.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"eeb52b23-0162-46ce-86b5-c2a9b2deb279","x":233,"y":100,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"f9fe6b1a-e13e-40a4-b91b-19825f2f981a","x":233,"y":176.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"a752b11a-c9df-492d-bd25-5cfbc5fdc69c","x":146,"y":253,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"e85a3cfb-af4e-4dfe-ad5e-3640e5ddf815","x":60,"y":253,"attrs":0,"template":"@__builtin__anchor","children":["f4bacdf4-137c-4a21-9b28-31a601870e82"],"properties":[],"angle":1},{"id":"ba99a0fd-5205-41f4-adb8-f122715cb116","x":-26,"y":253,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"98bc3b47-0239-4110-a227-3641f6fb9aef","x":-112,"y":176.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"720d1e01-46c5-4806-afe5-d36ff0b4bdac","x":-112,"y":100,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"5acb3f40-5fc0-4b1a-bf41-71adb51e8d64","x":-112,"y":23.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"0fd3c9d9-1f20-45a1-bcbb-8fba6bc0f8cc","x":-24,"y":297,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"1b71f600-ec1d-45c2-808e-1fde7c01d6c6","x":60,"y":297,"attrs":0,"template":"@__builtin__anchor","children":["c52cd5d2-5ffc-4663-af3d-87938265d67e"],"properties":[],"angle":1},{"id":"e787a0e9-42e8-4f32-8b76-1b9377b6db9a","x":144,"y":297,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"2a3a7eff-f3e3-48f9-b649-a177cc2f19d3","x":228,"y":373.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"9309c7c8-744f-4604-bfb6-1111cb690c17","x":228,"y":450,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"eafedf15-fc82-4353-b9f0-e487701746fc","x":228,"y":526.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"844b7179-886f-43de-b1f1-e8b308a12aea","x":144,"y":603,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"f0fba316-ed2b-403c-b951-22010ed89bf1","x":60,"y":603,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"9e523efa-e02b-4000-a33c-a09f55be45fe","x":-24,"y":603,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"23f183a3-ebbc-48ea-b272-87d4375ff234","x":-108,"y":526.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"07490a92-e2c7-4c96-bf76-da81de02a204","x":-108,"y":450,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"eb7d898d-ea0c-4c1c-ae81-6a4014099b35","x":-108,"y":373.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"22e180b2-8985-4025-8990-415797edbd0b","x":-114.5,"y":-527,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"12ea7f1a-be21-485c-8979-fdf1c7369e78","x":-27.25,"y":-490.5,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"feade46d-46ac-4d76-889c-b412f30b3b8a","x":60,"y":-454,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"60d7d144-4aff-44fd-b583-e7f928c7cd9a","x":60,"y":-125,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"18ada8dd-2998-421f-ae5d-dcb02bd49140","x":60,"y":-89,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"c10c4632-be45-4dcf-84c9-69a8f81a0576","x":60,"y":-53,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"f4bacdf4-137c-4a21-9b28-31a601870e82","x":60,"y":253,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"f29942b0-f3c2-4104-a261-58be90db9961","x":60,"y":275,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"c52cd5d2-5ffc-4663-af3d-87938265d67e","x":60,"y":297,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"499c6794-54ba-480c-81da-ff02ea70f962","x":-527,"y":-453,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"a510e9e9-d230-4402-a58f-82677e9201dd","x":-440,"y":-453,"attrs":0,"template":"@__builtin__anchor","children":["ebf71ef8-22c6-4b64-b026-dbd895a7319b"],"properties":[],"angle":1},{"id":"f60240d6-d3d8-4534-9b3c-8d1285817c4c","x":-353,"y":-453,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"5fb28003-8afa-4812-886b-2918bf20609a","x":-265,"y":-376.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"0aa22c63-fee0-44d2-80a8-17dd3a1adae0","x":-265,"y":-300,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"462fde3b-0d6f-40a8-b0af-bfda36944a36","x":-265,"y":-223.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"5db3cecb-4291-481b-8766-79ecc4ef2e80","x":-353,"y":-147,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"75300a8a-f0e1-460c-bda7-38641b3ca387","x":-440,"y":-147,"attrs":0,"template":"@__builtin__anchor","children":["c675c97b-18b1-45bd-baf4-1a30844d6ee8"],"properties":[],"angle":1},{"id":"e1d2866b-a565-4b07-b2ea-cf8c5dcc2460","x":-527,"y":-147,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"64d78512-081c-4a98-9f88-f208df6a9179","x":-614,"y":-223.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"aa52dfab-1a7e-466b-8d0f-d1189ac5dafd","x":-614,"y":-300,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"4c773781-93d7-48b2-995e-1657b6a14035","x":-614,"y":-376.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"7698ddf5-d969-4e70-ae38-ba7f68e8d082","x":-1046.5,"y":-823,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"112f4e90-2143-470f-9eec-43447300cb99","x":-970,"y":-823,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"d6d60880-9f58-4098-99fd-ebff4c5e5daf","x":-893.5,"y":-823,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"5c55b722-e807-4532-a539-e2e6ff027378","x":-816,"y":-746.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"6ae2ba2b-b5c9-4e90-8f14-a5672172baf2","x":-816,"y":-670,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"0c9c685b-d2a3-4f09-ae17-321bfeb58089","x":-816,"y":-593.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"ba40967b-b14c-4d4a-830a-4525fb06ba37","x":-893.5,"y":-517,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"24134dc4-72f1-4060-af9e-26f43790a523","x":-970,"y":-517,"attrs":0,"template":"@__builtin__anchor","children":["a331a23f-66bf-46c2-94a9-35c40e7c92ab"],"properties":[],"angle":1},{"id":"b08a1923-338c-409a-b316-4ac6ab43b688","x":-1046.5,"y":-517,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"0dd5b21b-0eb4-4263-9bff-ad2d2f4a87c1","x":-1123,"y":-593.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"80aa8ec7-ab09-4f3d-a01d-96fe3be16b96","x":-1123,"y":-670,"attrs":0,"template":"@__builtin__anchor","children":["23d08a55-cb8e-4a0d-a25e-3356b9832f26"],"properties":[],"angle":0},{"id":"d0b9d485-9aca-49a2-baa7-7ddf88c13970","x":-1123,"y":-746.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"5512b64a-2e59-487f-8385-29cc2f3e3286","x":-1059.5,"y":-462,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"cabe6eed-adad-4acf-ab98-ec8671ccd03c","x":-970,"y":-462,"attrs":0,"template":"@__builtin__anchor","children":["81d2b434-e590-401e-b9ff-b3ce8f214916"],"properties":[],"angle":1},{"id":"73ca58f2-3bf3-498f-848a-01e5f139de99","x":-880.5,"y":-462,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"25e851bc-5c99-48d5-85bc-4cf767414bb7","x":-790,"y":-386,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"9271b6e1-0268-4e36-af7e-c37dbb342272","x":-790,"y":-310,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"6fb7edb2-b551-4e5e-aae3-550cd54ff0eb","x":-790,"y":-234,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"db8dd69f-1dea-478f-9b3a-6429500956f6","x":-880.5,"y":-157,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"07d58bf3-edc2-4ef1-bc96-ef969f962741","x":-970,"y":-157,"attrs":0,"template":"@__builtin__anchor","children":["65ef7ed9-5dba-491b-bf0b-b9240fb3a83f"],"properties":[],"angle":1},{"id":"31628a45-8cca-410e-a880-21f7d2f5f847","x":-1059.5,"y":-157,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"f3dd85d5-a1b5-48fd-802b-57d2b2add1d6","x":-1149,"y":-234,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"5270a5e1-fd46-4cc2-9765-09c78b679186","x":-1149,"y":-310,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"a25fa8a0-6db2-4e8c-adf6-1c67d6d711b3","x":-1149,"y":-386,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"a331a23f-66bf-46c2-94a9-35c40e7c92ab","x":-970,"y":-517,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"fe0f549e-70d9-4e17-bb72-1c05f6e41de5","x":-970,"y":-489.5,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"81d2b434-e590-401e-b9ff-b3ce8f214916","x":-970,"y":-462,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"5104a439-f4b8-4eef-9031-7cab985135b5","x":-728.5,"y":-56,"attrs":0,"template":"@__builtin__anchor","children":["5da3a7d0-7035-4acb-acc3-7d55bd2f3ffb"],"properties":[],"angle":1},{"id":"e70b02c6-02ee-4ed9-9821-6ed63ea716fc","x":-700,"y":-56,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"5db336f6-021d-4286-b44f-f0e030571b33","x":-671.5,"y":-56,"attrs":0,"template":"@__builtin__anchor","children":["7b95c4f6-0a94-4d60-a2b0-037f8a609c7a"],"properties":[],"angle":1},{"id":"859dcb54-071f-4bff-84ec-7e9132dda9e2","x":-643,"y":-43,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"090f8cc6-6adc-471f-9527-a3827bd18d2d","x":-643,"y":-30,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"eec76a6f-eed6-4c2d-bd34-cf37c24363e9","x":-643,"y":-17,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"eb8956e0-e619-4589-a553-073a79261456","x":-671.5,"y":-4,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"24520312-c059-48c9-81e5-0e3e8859717f","x":-700,"y":-4,"attrs":0,"template":"@__builtin__anchor","children":["c3a0b6e6-340f-4646-b460-921eca4efb64"],"properties":[],"angle":1},{"id":"0db25ec1-7a47-4e83-a3d2-22a74f19e450","x":-728.5,"y":-4,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"873d3b1b-4f01-4f28-bed2-d8096059a44a","x":-757,"y":-17,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"d436f10d-9d6a-417a-a84b-6dbb75bb08d1","x":-757,"y":-30,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"d85d8223-ffea-44c2-9dad-3732a88b6ab9","x":-757,"y":-43,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"65ef7ed9-5dba-491b-bf0b-b9240fb3a83f","x":-970,"y":-157,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"af17adbd-b939-4b09-8c73-ff1e60d6da93","x":-849.25,"y":-106.5,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"5da3a7d0-7035-4acb-acc3-7d55bd2f3ffb","x":-728.5,"y":-56,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"c675c97b-18b1-45bd-baf4-1a30844d6ee8","x":-440,"y":-147,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"4fa9336d-2c73-45b7-8a90-51f8074dc795","x":-555.75,"y":-101.5,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"7b95c4f6-0a94-4d60-a2b0-037f8a609c7a","x":-671.5,"y":-56,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"58573954-a876-4a9f-a530-fd28be56ad6b","x":-784.5,"y":37,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"48624629-5ae1-492d-b7d8-d22cc66c5d10","x":-700,"y":37,"attrs":0,"template":"@__builtin__anchor","children":["ccb03e75-99b8-4691-95c7-18782ae57590"],"properties":[],"angle":1},{"id":"7b204781-396b-4e83-9a02-dad2182ac0bd","x":-615.5,"y":37,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"839d6390-d76d-409c-9f1c-2d6960d7ce2b","x":-531,"y":118.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"b3744fb3-277c-4770-830d-4534f725a6ca","x":-531,"y":200,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"a3e3854a-b82f-4f97-80fe-ec4c53643de9","x":-531,"y":281.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"ffe1c7b3-2ed0-41a7-bfec-ce0f93edcae3","x":-615.5,"y":363,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"7bf6ca5e-d638-4f26-a0c8-31709b6e2e7c","x":-700,"y":363,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"30d9cc4b-84eb-4b9a-811c-80047d31654b","x":-784.5,"y":363,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"98bc70d8-d87d-49b5-90f0-a8579d754c5e","x":-869,"y":281.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"317636e7-0483-4484-8dff-11e2d93127b5","x":-869,"y":200,"attrs":0,"template":"@__builtin__anchor","children":["617601cf-99eb-4fa1-b1e8-aa180c17a5d2"],"properties":[],"angle":0},{"id":"070e8c04-78a0-4bb8-9a34-7349ee6d9936","x":-869,"y":118.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"c3a0b6e6-340f-4646-b460-921eca4efb64","x":-700,"y":-4,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"999ae3a1-f417-4f70-8a04-cb875a8d4cdb","x":-700,"y":16.5,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"ccb03e75-99b8-4691-95c7-18782ae57590","x":-700,"y":37,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"a73fd4a0-9ba5-4db1-8240-aabfb3f5f974","x":-1509,"y":-150,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"c4d8b754-0d01-4307-9215-efecdef1cc9a","x":-1420,"y":-150,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"1c389837-4228-40c1-8448-519cf5daae28","x":-1331,"y":-150,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"25df69fd-a5aa-47ba-9d2c-c497525a09b6","x":-1242,"y":-100,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"2d1338f3-3ba2-4ec6-b313-eedf83cb2e22","x":-1242,"y":-50,"attrs":0,"template":"@__builtin__anchor","children":["cbe72159-80ea-4ce5-8df6-915e63994841"],"properties":[],"angle":0},{"id":"5880019a-26e1-418c-a445-f3a1bf7c910d","x":-1242,"y":0,"attrs":0,"template":"@__builtin__anchor","children":["db2ce7ec-8ea1-4518-9963-a16c7e0b3a9a"],"properties":[],"angle":0},{"id":"5e13f39b-0082-4642-a3b0-ad34142cefac","x":-1331,"y":50,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"0b8c07cc-145e-42a7-accd-8490cffd4dc0","x":-1420,"y":50,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"4379f724-959a-4c22-82c1-a251e5d8440e","x":-1509,"y":50,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"dbb649b9-6e25-4b48-bd7e-70100b412af2","x":-1598,"y":0,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"702ce9a6-1185-4961-b16a-41a0c904cd9b","x":-1598,"y":-50,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"de8fda71-8cc1-491f-8c19-b854ef290180","x":-1598,"y":-100,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"23d08a55-cb8e-4a0d-a25e-3356b9832f26","x":-1123,"y":-670,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"d442dff5-b285-4237-bebd-de45e9d71e7c","x":-1182.5,"y":-360,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"cbe72159-80ea-4ce5-8df6-915e63994841","x":-1242,"y":-50,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"617601cf-99eb-4fa1-b1e8-aa180c17a5d2","x":-869,"y":200,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"24727396-5702-4e32-a8b1-7bbe3550c39a","x":-1055.5,"y":100,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"db2ce7ec-8ea1-4518-9963-a16c7e0b3a9a","x":-1242,"y":0,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"a7991664-5673-4bc3-abec-d0071e1a2914","x":451,"y":-393,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"e426ccde-78e9-42a7-8513-4b98f65a9608","x":540,"y":-393,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"3d7f2dbe-0a20-4240-9d46-d737da6ffa1f","x":629,"y":-393,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"985322f1-bc16-4825-a8be-06187cd0d586","x":718,"y":-341.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"1a772b6a-00a5-4869-b80d-39ea7ac72d5a","x":718,"y":-290,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"a75122d9-894b-4a29-a85c-49a52ae7ec13","x":718,"y":-238.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"5c6d6bf2-a272-4a9d-902e-907a5be82bee","x":629,"y":-186,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"bed73720-5151-493f-b52a-82a67dc65ae8","x":540,"y":-186,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"64d83245-af64-4439-999c-3310a142413f","x":451,"y":-186,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":1},{"id":"946aae6d-41ad-4a0d-b1c9-18e0bad29578","x":362,"y":-238.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"cc8101a0-39ef-4cb8-bff3-df49f65200a6","x":362,"y":-290,"attrs":0,"template":"@__builtin__anchor","children":["c57c9070-8d0e-4891-8520-6f38901f8435"],"properties":[],"angle":0},{"id":"b7e2301b-514d-4211-842a-fd6dcd1cecbc","x":362,"y":-341.5,"attrs":0,"template":"@__builtin__anchor","children":[],"properties":[],"angle":0},{"id":"1bf49fa6-1e33-4467-bf4e-4be94e5e21cb","x":-265.5,"y":-527,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"9545054f-9514-4841-9956-c2def78b98de","x":-352.75,"y":-490,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"ebf71ef8-22c6-4b64-b026-dbd895a7319b","x":-440,"y":-453,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]},{"id":"c57c9070-8d0e-4891-8520-6f38901f8435","x":362,"y":-290,"attrs":0,"template":"@__builtin__line_source","children":[],"properties":[]},{"id":"65ebe83f-6e47-4b4c-8fcb-b621d2152b76","x":298,"y":-290,"attrs":0,"template":"@__builtin__line_handle","children":[],"properties":[]},{"id":"3155918f-8ee0-4859-ad3a-4e10ccb2864c","x":234,"y":-290,"attrs":0,"template":"@__builtin__line_target","children":[],"properties":[]}],"location":{"x":-650.7149659550587,"y":-134.46168433693455,"k":0.5347596440115531}}