{
    "type": "bundle",
    "id": "bundle--1f3a999d-823d-4801-b320-de53b054d68c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--044298e0-a889-43a6-ae07-125f16649389",
            "created": "2026-09-08T04:27:38.409205Z",
            "modified": "2026-09-08T05:29:08.952493Z",
            "name": "DSLU",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9b2de1b5-782d-49a7-b961-eb5aa1609c39",
            "hashes": {
                "SHA-256": "2c9db137905868ff05f96f7320ef3de1b772bdc2450d219e4d36de1d0e26751d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6bff6332-135b-46f3-8756-cac092ea292a",
            "hashes": {
                "SHA-256": "81a7d91d1d3bab0fe882108f024bdffd128474fcc4829800a61acd4b1607d214"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4e7a21c4-6b96-4d21-b003-87440bb64edc",
            "hashes": {
                "SHA-256": "bb4810105b7fd9b9f03841f693741f808b81fcce5d40c41473cd21811f8e99a8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--185dbf8e-de78-4842-8dab-86203bb3a5c0",
            "hashes": {
                "SHA-256": "8f18b20ef1e9067afa9f9bcba7cd9141d7f5206eead1ab3691352879ef231dbd"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--59d33624-594d-48fb-9665-104f79187f4b",
            "hashes": {
                "SHA-256": "1b9f686134f23408d04759fac16730e325ad934d66ace57a71e845a839b4382d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--edf1b1df-d690-4c12-a37d-7b46f985ad45",
            "hashes": {
                "SHA-256": "5b65ba3828c528c24e4d0d5a30eb645bc4f7d2266183d6b0bef0e47673444ae3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--565d2905-6ac8-4cc7-888f-6c69a9c1b2d7",
            "hashes": {
                "SHA-256": "0b3c31c851f3c1c0fa38f3719de5e600d89a817a3186cbc09d7d5315e1cbf561"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c9a35fc0-fab2-4c9b-badd-36883f6f60f4",
            "hashes": {
                "SHA-256": "51bc09ddb8652c8186b096114100445919ba3ad73e6d3d5975661ec8d1e09ae1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--80c8284f-d6f5-4a8b-8967-0c76930cdb0c",
            "hashes": {
                "SHA-256": "a906cea68e328b76195b22a60f61df1e8ba1293567944d150fc984884035b56d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2007cd61-058d-4c4a-a8b8-0526465c54ed",
            "hashes": {
                "SHA-256": "49a3d8e210e744fcd7d9fa1d3fbc78ca9b632c23f8a306a2f917df0bc035ee1d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bf4c64a9-d7f1-48ad-8fe1-c48a6b0ba593",
            "hashes": {
                "SHA-256": "d37ba2d919be0255f2950ec596ad3107f4f3938bb53b458af06aea8991b665f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a87d0780-6d0f-4ac6-85e0-6967993b7405",
            "hashes": {
                "SHA-256": "b876690798b14de8015eb7fd4eac7c3080f5c062376a082a86d81e6dccef0537"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--09697b29-22ef-4a5e-9e4d-168aaa7444ac",
            "hashes": {
                "SHA-256": "cbe68d8dea02675410181af1b769aefa7ec5cd9eefda6555d920dd9e25e6d9b5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b927bccc-e54e-4c2d-9f01-2d4f66d8de58",
            "hashes": {
                "SHA-256": "142bf55220fc1bf0f612ba03986768b663d819b14f49af004329342bd64f319f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2e158c87-282a-498a-b66a-36ce9fff346b",
            "hashes": {
                "SHA-256": "3efb40b7061ea419ac03f42be49a7a8e0f6d2831571d5d14e76137dbcbf4cbbb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--abc72aef-1342-4443-bf6c-4b02e251a709",
            "hashes": {
                "SHA-256": "a865ed5002f2dfa61be27c58448a61f05259167938aa6eecc7c259693dba7580"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--03ba3ac8-3703-4ae6-b8cb-62cb75307789",
            "hashes": {
                "SHA-256": "5628430574d3abb66aef8941bc8aee7d6f2c7b3993eb8fcd4d4fff3f2c315e94"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--439310ee-03de-4cc6-af6f-378c4b82fffd",
            "value": "https://raw.githubusercontent.com/shantez441/EDGTy/refs/heads/main/wiask.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c935f16e-6677-448f-933f-9a5557f458e7",
            "value": "http://raw.githubusercontent.com/cryseuk/ayukiko/refs/heads/main/apple.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--dd9eab60-0579-4732-b57d-21a30045c7bc",
            "value": "https://github.com/bormanye/chseirfkks/raw/refs/heads/main/second.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--51274036-fcc4-480d-b93e-79eae47e098c",
            "value": "https://github.com/bormanye/chseirfkks/raw/refs/heads/main/help.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--896f0dd2-4939-4186-b070-2b3653397ac6",
            "value": "https://github.com/bormanye/chseirfkks/raw/refs/heads/main/first.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--700440f9-5119-4e39-b50c-5b4890cedc9f",
            "value": "https://gitlab.com/kickball12/bahubali/-/raw/main/aaa.pdf"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5e771099-4919-4e7c-9928-e968de4761d6",
            "value": "https://gitlab.com/kickball12/bahubali/-/raw/main/help.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--eb842303-01e0-498c-ad0d-3db4eefc0c95",
            "value": "https://gitlab.com/kickball12/bahubali/-/raw/main/first.ini"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--214bb98a-54f6-4c29-8c62-d6221305d5f8",
            "value": "https://codeberg.org/tomas-89/myaccount/raw/branch/main/\u0410\u043d\u0430\u043b\u0456\u0442\u0438\u0447\u043d\u0438\u0439_\u0437\u0432\u0456\u0442_\u041d\u0430\u0442\u0430\u043b\u0456\u0457.zip"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8cc298f1-864b-40b6-afbd-178f0e42679e",
            "value": "borman@outlook.kr"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--310ea60d-ff4a-4a26-af2a-da813322d1db",
            "value": "info.seclab.noreply@gmail.com"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--774bca27-c3f2-4d57-96a4-976de0f5e9b0",
            "created_by_ref": "identity--044298e0-a889-43a6-ae07-125f16649389",
            "created": "2026-09-08T08:11:08.912582Z",
            "modified": "2026-09-08T08:11:08.912582Z",
            "name": "Living off GitHub: From Gmail Reply-Baiting to Fileless Exfiltration",
            "published": "2026-08-24T00:00:00Z",
            "object_refs": [
                "identity--044298e0-a889-43a6-ae07-125f16649389",
                "file--9b2de1b5-782d-49a7-b961-eb5aa1609c39",
                "file--6bff6332-135b-46f3-8756-cac092ea292a",
                "file--4e7a21c4-6b96-4d21-b003-87440bb64edc",
                "file--185dbf8e-de78-4842-8dab-86203bb3a5c0",
                "file--59d33624-594d-48fb-9665-104f79187f4b",
                "file--edf1b1df-d690-4c12-a37d-7b46f985ad45",
                "file--565d2905-6ac8-4cc7-888f-6c69a9c1b2d7",
                "file--c9a35fc0-fab2-4c9b-badd-36883f6f60f4",
                "file--80c8284f-d6f5-4a8b-8967-0c76930cdb0c",
                "file--2007cd61-058d-4c4a-a8b8-0526465c54ed",
                "file--bf4c64a9-d7f1-48ad-8fe1-c48a6b0ba593",
                "file--a87d0780-6d0f-4ac6-85e0-6967993b7405",
                "file--09697b29-22ef-4a5e-9e4d-168aaa7444ac",
                "file--b927bccc-e54e-4c2d-9f01-2d4f66d8de58",
                "file--2e158c87-282a-498a-b66a-36ce9fff346b",
                "file--abc72aef-1342-4443-bf6c-4b02e251a709",
                "file--03ba3ac8-3703-4ae6-b8cb-62cb75307789",
                "url--439310ee-03de-4cc6-af6f-378c4b82fffd",
                "url--c935f16e-6677-448f-933f-9a5557f458e7",
                "url--dd9eab60-0579-4732-b57d-21a30045c7bc",
                "url--51274036-fcc4-480d-b93e-79eae47e098c",
                "url--896f0dd2-4939-4186-b070-2b3653397ac6",
                "url--700440f9-5119-4e39-b50c-5b4890cedc9f",
                "url--5e771099-4919-4e7c-9928-e968de4761d6",
                "url--eb842303-01e0-498c-ad0d-3db4eefc0c95",
                "url--214bb98a-54f6-4c29-8c62-d6221305d5f8",
                "email-addr--8cc298f1-864b-40b6-afbd-178f0e42679e",
                "email-addr--310ea60d-ff4a-4a26-af2a-da813322d1db"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://dslua.org/publications/living-off-github-from-gmail-reply-baiting-to-fileless-exfiltration/"
                }
            ]
        }
    ]
}