{
    "type": "bundle",
    "id": "bundle--11596bb6-01ac-4cc9-bac4-738a36a4a64a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3f0ab225-feb7-4d8d-8ce9-fcd3a5f5abd6",
            "hashes": {
                "MD5": "397ba1d0601558dfe34cd5aafaedd18e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed08adb4-7aa4-4e62-a51f-da41e1780fe5",
            "hashes": {
                "MD5": "0dc39af4899f6aa0a8d29426aba59314"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1421e278-2f1f-44a3-b99c-fa33197e599c",
            "hashes": {
                "MD5": "3bdfaf98d820a1d8536625b9efd3bb14"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d127409-ff85-4fd7-8358-0f5d1780e721",
            "hashes": {
                "MD5": "252227b8701d45deb0cc6b0edad98836"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--6f655d5d-dffe-5c22-8d5e-00da6ad72824",
            "created": "2026-06-24T17:12:22.851407Z",
            "modified": "2026-06-24T17:12:22.851407Z",
            "name": "UNC1130"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--47f8de62-2d2f-47d6-b531-c54960eebba5",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-06-24T17:12:22.852436Z",
            "modified": "2026-06-24T17:12:22.852436Z",
            "name": "Detecting Embedded Content in OOXML Documents",
            "published": "2022-08-18T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "file--3f0ab225-feb7-4d8d-8ce9-fcd3a5f5abd6",
                "file--ed08adb4-7aa4-4e62-a51f-da41e1780fe5",
                "file--1421e278-2f1f-44a3-b99c-fa33197e599c",
                "file--6d127409-ff85-4fd7-8358-0f5d1780e721",
                "threat-actor--6f655d5d-dffe-5c22-8d5e-00da6ad72824"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/detecting-embedded-content-in-ooxml-documents"
                }
            ]
        }
    ]
}