DISARMframeworks/generated_files/DISARM_STIX/attack-pattern/attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6.json

{
    "type": "bundle",
    "id": "bundle--45b2d620-093f-4fc4-9eb3-0cbc7412c81c",
    "objects": [
        {
            "type": "attack-pattern",
            "spec_version": "2.1",
            "id": "attack-pattern--d4254a49-6d3a-46cc-9b41-e56a1c0ea8f6",
            "created_by_ref": "identity--56ecd0d7-2c77-4daa-afe7-6e811d9e456b",
            "created": "2022-07-02T19:59:12.736942Z",
            "modified": "2022-07-02T19:59:12.736942Z",
            "name": "Use Shell Organizations",
            "description": "Use Shell Organizations to conceal sponsorship.",
            "kill_chain_phases": [
                {
                    "kill_chain_name": "mitre-attack",
                    "phase_name": "persist-in-the-information-environment"
                }
            ],
            "external_references": [
                {
                    "source_name": "DISARM",
                    "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0130.003.md",
                    "external_id": "T0130.003"
                }
            ],
            "object_marking_refs": [
                "marking-definition--8c38a88c-17da-4495-b5f3-7e1ebf6e9b8d"
            ],
            "x_mitre_is_subtechnique": true,
            "x_mitre_platforms": [
                "Windows",
                "Linux",
                "Mac"
            ],
            "x_mitre_version": "1.0"
        }
    ]
}