{
    "type": "bundle",
    "id": "bundle--15377915-f1b3-407d-8e37-dbf3cbfab24b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--47723423-9caf-4873-a0f5-1b47c5f604ec",
            "created": "2023-03-21T11:06:09.563667Z",
            "modified": "2023-03-21T11:07:41.943781Z",
            "name": "IBM",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-29T19:57:41.681226Z",
            "modified": "2026-10-29T19:57:41.681226Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e0b08ac1-80d4-4fc8-a9c1-cef5ed4add8e",
            "created_by_ref": "identity--47723423-9caf-4873-a0f5-1b47c5f604ec",
            "created": "2026-10-29T19:57:41.681533Z",
            "modified": "2026-10-29T19:57:41.681533Z",
            "name": "Direct Kernel Object Manipulation (DKOM) Attacks on ETW Providers",
            "published": "2023-02-21T00:00:00Z",
            "object_refs": [
                "identity--47723423-9caf-4873-a0f5-1b47c5f604ec",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securityintelligence.com/posts/direct-kernel-object-manipulation-attacks-etw-providers/"
                }
            ]
        }
    ]
}