{
    "type": "bundle",
    "id": "bundle--c4a69931-325a-4ede-a12d-a40de43ce16e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2023-03-08T12:51:43.404685Z",
            "modified": "2024-08-31T04:09:59.408166Z",
            "name": "Microsoft",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160",
            "created": "2026-06-24T18:43:30.533025Z",
            "modified": "2026-06-24T18:43:30.533025Z",
            "name": "OnyxSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--07508793-2a33-5982-b040-9114591a8330",
            "created": "2026-06-24T18:43:30.535967Z",
            "modified": "2026-06-24T18:43:30.535967Z",
            "name": "CitrineSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--73a3e570-9b50-40c2-b74d-3d0c6485fb3b",
            "created_by_ref": "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
            "created": "2026-06-24T18:43:30.537267Z",
            "modified": "2026-06-24T18:43:30.537267Z",
            "name": "Citrine and Onyx Sleet: An Inside Look at North Korean Threat Actors",
            "published": "2024-09-11T00:00:00Z",
            "object_refs": [
                "identity--a361b290-d09a-4e0e-a13d-681ca0c3dcc7",
                "threat-actor--2affbaa4-5aae-53f8-8e70-9e82df1e8160",
                "threat-actor--07508793-2a33-5982-b040-9114591a8330"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://thecyberwire.com/podcasts/microsoft-threat-intelligence/27/notes"
                }
            ]
        }
    ]
}