{
    "type": "bundle",
    "id": "bundle--3e63e35b-92e8-4725-b6a2-50e24f57cedf",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6d94bd75-68fc-4b8a-9bcb-a3ccd46ec934",
            "hashes": {
                "MD5": "9176f177bd88686c6beb29d8bb05f20c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b7993618-e09d-455c-adb3-a78902b33d6d",
            "hashes": {
                "MD5": "ad452d161782290ad5004b2c9497074f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c508bf35-3fa8-403a-9563-80130aa0c1cf",
            "hashes": {
                "MD5": "def6f91614cb47888f03658b28a1bda6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--990a5662-1bd8-4ee2-8983-225ebcd99513",
            "hashes": {
                "SHA-256": "175eed7a4c6de9c3156c7ae16ae85c554959ec350f1c8aaa6dfe8c7e99de3347"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9e0a2830-d644-4eb3-ab38-b99988fe0506",
            "hashes": {
                "MD5": "7e6e2ed880c7ab115fca68136051f9ce"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec",
            "created": "2026-06-24T18:19:32.384135Z",
            "modified": "2026-06-24T18:19:32.384135Z",
            "name": "UNC2970"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a6ff8472-6e0e-4288-94e0-706641c753a9",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-06-24T18:19:32.388005Z",
            "modified": "2026-06-24T18:19:32.388005Z",
            "name": "Stealing the LIGHTSHOW (Part Two) \u2014 LIGHTSHIFT and LIGHTSHOW",
            "published": "2023-03-09T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "file--6d94bd75-68fc-4b8a-9bcb-a3ccd46ec934",
                "file--b7993618-e09d-455c-adb3-a78902b33d6d",
                "file--c508bf35-3fa8-403a-9563-80130aa0c1cf",
                "file--990a5662-1bd8-4ee2-8983-225ebcd99513",
                "file--9e0a2830-d644-4eb3-ab38-b99988fe0506",
                "threat-actor--049cf601-7a61-5344-a195-591661b1b2ec"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/lightshift-and-lightshow"
                }
            ]
        }
    ]
}