{
    "type": "bundle",
    "id": "bundle--e33cb3fa-eb1c-42d4-86b0-aec7260cca6b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--0f4c4657-f9bc-5abe-bace-19905645a02b",
            "created": "2026-08-09T21:22:23.230341Z",
            "modified": "2026-08-09T21:22:23.230341Z",
            "name": "Sleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160",
            "created": "2026-08-09T21:22:23.231044Z",
            "modified": "2026-08-09T21:22:23.231044Z",
            "name": "OnyxSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--7e17b02a-817f-58ff-8489-aac76b0f02a4",
            "created": "2026-08-09T21:22:23.231741Z",
            "modified": "2026-08-09T21:22:23.231741Z",
            "name": "DiamondSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--7d9eef76-0e2d-5a67-949a-6f9cc53b7376",
            "created": "2026-08-09T21:22:23.232366Z",
            "modified": "2026-08-09T21:22:23.232366Z",
            "name": "EmeraldSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad038ee8-51a3-51b0-99e5-ebc7a614d7b3",
            "created": "2026-08-09T21:22:23.233061Z",
            "modified": "2026-08-09T21:22:23.233061Z",
            "name": "OpalSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--660385ef-7aa6-5c29-9add-dce52d2069c4",
            "created": "2026-08-09T21:22:23.233711Z",
            "modified": "2026-08-09T21:22:23.233711Z",
            "name": "PearlSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
            "created": "2026-08-09T21:22:23.234336Z",
            "modified": "2026-08-09T21:22:23.234336Z",
            "name": "RubySleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-08-09T21:22:23.234983Z",
            "modified": "2026-08-09T21:22:23.234983Z",
            "name": "SapphireSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--9ea1c8ad-185c-5023-a52f-4b05b89d7549",
            "created": "2026-08-09T21:22:23.235594Z",
            "modified": "2026-08-09T21:22:23.235594Z",
            "name": "Lawrencium"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--173136bb-1849-585f-90d5-79a34b0690de",
            "created": "2026-08-09T21:22:23.236229Z",
            "modified": "2026-08-09T21:22:23.236229Z",
            "name": "Storm-0530"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c",
            "created": "2026-08-09T21:22:23.236889Z",
            "modified": "2026-08-09T21:22:23.236889Z",
            "name": "Storm-1877"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--4c149106-9174-5cca-9308-2eef2a12d091",
            "created": "2026-08-09T21:22:23.237514Z",
            "modified": "2026-08-09T21:22:23.237514Z",
            "name": "Storm-0287"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--e50f1418-470a-5b4b-a3c0-c0cb6e442822",
            "created": "2026-08-09T21:22:23.238166Z",
            "modified": "2026-08-09T21:22:23.238166Z",
            "name": "Storm-0139"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--9ee1841f-c537-5d0e-ae58-53146f136247",
            "created": "2026-08-09T21:22:23.238802Z",
            "modified": "2026-08-09T21:22:23.238802Z",
            "name": "Storm-1222"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--108c09bc-fa0d-5650-8f88-ad322a66d407",
            "created": "2026-08-09T21:22:23.239421Z",
            "modified": "2026-08-09T21:22:23.239421Z",
            "name": "Storm-0954"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--4945e72f-a29a-4fcb-97df-313557c4286e",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-08-09T21:22:23.239712Z",
            "modified": "2026-08-09T21:22:23.239712Z",
            "name": "How Microsoft names threat actors",
            "published": "2023-04-18T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "threat-actor--0f4c4657-f9bc-5abe-bace-19905645a02b",
                "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160",
                "threat-actor--7e17b02a-817f-58ff-8489-aac76b0f02a4",
                "threat-actor--7d9eef76-0e2d-5a67-949a-6f9cc53b7376",
                "threat-actor--ad038ee8-51a3-51b0-99e5-ebc7a614d7b3",
                "threat-actor--660385ef-7aa6-5c29-9add-dce52d2069c4",
                "threat-actor--19afa647-d401-5f70-bac5-74f86cbeb5f1",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
                "threat-actor--9ea1c8ad-185c-5023-a52f-4b05b89d7549",
                "threat-actor--173136bb-1849-585f-90d5-79a34b0690de",
                "threat-actor--ddde9e57-1fd0-5698-8488-0a3516cca59c",
                "threat-actor--4c149106-9174-5cca-9308-2eef2a12d091",
                "threat-actor--e50f1418-470a-5b4b-a3c0-c0cb6e442822",
                "threat-actor--9ee1841f-c537-5d0e-ae58-53146f136247",
                "threat-actor--108c09bc-fa0d-5650-8f88-ad322a66d407"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
                }
            ]
        }
    ]
}