{ "type": "bundle", "id": "bundle--af38b9a2-c6bb-46c5-a552-70877ef062a6", "objects": [ { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--38ac5a3d-12b5-46e5-9875-00514da8587a", "created_by_ref": "identity--5fa8da8d-6fbd-4155-9d06-a0dcc3b6dd7d", "created": "2022-07-02T17:28:37.01039Z", "modified": "2022-07-02T17:28:37.01039Z", "name": "Remove Post Origins", "description": "TA11", "kill_chain_phases": [ { "kill_chain_name": "mitre-attack", "phase_name": "persist-in-the-information-environment" } ], "external_references": [ { "source_name": "DISARM", "url": "https://github.com/DISARMFoundation/DISARM_framework/blob/master/techniques/T0129.009.md", "external_id": "T0129.009" } ], "object_marking_refs": [ "marking-definition--9abfc32c-4daa-440b-a6ad-439fb022dfc6" ], "x_mitre_is_subtechnique": true, "x_mitre_platforms": [ "Windows", "Linux", "Mac" ], "x_mitre_version": "1.0" } ] }