{
    "type": "bundle",
    "id": "bundle--bcf2a327-9027-49e8-bc81-87e6055b6f05",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ee1b8854-c984-49a2-9f2b-5ebece058e26",
            "created": "2025-12-20T00:54:08.456416Z",
            "modified": "2026-07-06T23:02:54.286966Z",
            "name": "Darktrace",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5ce162bb-2662-45c8-a7df-83ab62acb6c1",
            "value": "zoom.uswebob.us"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
            "value": "83.136.210.180"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
            "value": "83.136.208.48"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
            "value": "check02id.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
            "value": "83.136.208.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
            "value": "104.145.210.107"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--91862759-8ea5-4e5e-ac33-af4c0755d2c7",
            "value": "148.72.73.98"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-07-07T01:36:34.579102Z",
            "modified": "2026-07-07T01:36:34.579102Z",
            "name": "SapphireSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--aaadd56c-5458-4184-bf98-f3f633befef6",
            "created_by_ref": "identity--ee1b8854-c984-49a2-9f2b-5ebece058e26",
            "created": "2026-07-07T01:36:34.595727Z",
            "modified": "2026-07-07T01:36:34.595727Z",
            "name": "From Click to Command: Behavioral Detection of AppleScript-Led MacOS Intrusions",
            "published": "2026-06-24T00:00:00Z",
            "object_refs": [
                "identity--ee1b8854-c984-49a2-9f2b-5ebece058e26",
                "domain-name--5ce162bb-2662-45c8-a7df-83ab62acb6c1",
                "ipv4-addr--7e661c1e-abfb-4ae3-96f2-26612b12556c",
                "ipv4-addr--95cd38e2-0367-434e-8187-f5f637d9f14e",
                "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
                "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
                "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
                "ipv4-addr--91862759-8ea5-4e5e-ac33-af4c0755d2c7",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.darktrace.com/blog/from-click-to-command-behavioral-detection-of-applescript-led-macos-intrusions"
                }
            ]
        }
    ]
}