{
    "type": "bundle",
    "id": "bundle--ff483d98-e3cf-42e1-9dec-4e8342b278c2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--484f0b3c-d09b-426b-9ad2-7155415c9866",
            "created": "2026-07-22T11:06:45.157882Z",
            "modified": "2026-07-22T11:06:45.157902Z",
            "name": "ORO",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760",
            "created": "2026-07-22T14:14:09.719589Z",
            "modified": "2026-07-22T14:14:09.719589Z",
            "name": "SapphireSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ad0d6b39-9fe2-406f-8fe5-3b6e6c399645",
            "created_by_ref": "identity--484f0b3c-d09b-426b-9ad2-7155415c9866",
            "created": "2026-07-22T14:14:09.720412Z",
            "modified": "2026-07-22T14:14:09.720412Z",
            "name": "ORO Hack Post-Mortem: The Sapphire Sleet Intrusion",
            "published": "2026-07-21T00:00:00Z",
            "object_refs": [
                "identity--484f0b3c-d09b-426b-9ad2-7155415c9866",
                "threat-actor--ad58f665-2d60-592c-9ad6-a6ba3b636760"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://x.com/oroagents/status/2079371018880041257"
                }
            ]
        }
    ]
}