{ "dataset": "corrobore-pheromones-retrieval", "version": "1.0.0", "description": "Two task families over one graph, each with a productive path to evidence and a dead-end path through stale restatements.", "license": "CC0-1.0", "generated_by": "corrobore-website/usecases/pheromones.mjs", "facts": { "productive_paths": 12, "dead_end_leaves": 54, "task_families": 2, "edge_kinds": 8 }, "memories": [ { "identity_key": "case--fimi-01", "kind": "retrieval.case", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Influence financing review: who funds the amplification network.", "properties": {} } }, "provenance": [ { "source_id": "case-file", "locator": "case--fimi-01#opening", "observed_at": null } ], "confidence": 1, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "case" ] }, { "identity_key": "case--cti-01", "kind": "retrieval.case", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Intrusion review: which infrastructure the operator reused.", "properties": {} } }, "provenance": [ { "source_id": "case-file", "locator": "case--cti-01#opening", "observed_at": null } ], "confidence": 1, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "case" ] }, { "identity_key": "beneficiary--01", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 1 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--01#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-01", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 1.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-01#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--02", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 2 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--02#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-02", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 2.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-02#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--03", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 3 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--03#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-03", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 3.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-03#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--04", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 4 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--04#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-04", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 4.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-04#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--05", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 5 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--05#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-05", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 5.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-05#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--06", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 6 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--06#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-06", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 6.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-06#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--07", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 7 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--07#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-07", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 7.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-07#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--08", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 8 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--08#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-08", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 8.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-08#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--09", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 9 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--09#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-09", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 9.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-09#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--10", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 10 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--10#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-10", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 10.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-10#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--11", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 11 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--11#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-11", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 11.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-11#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "beneficiary--12", "kind": "retrieval.beneficiary", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Validated beneficiary 12 of the financing chain, confirmed against a corporate registry.", "properties": { "validated": true } } }, "provenance": [ { "source_id": "registry", "locator": "beneficiary--12#record", "observed_at": null } ], "confidence": 0.87, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "beneficiary" ] }, { "identity_key": "evidence--filing-12", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Registry filing documenting a transfer to beneficiary 12.", "properties": {} } }, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-12#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "evidence" ] }, { "identity_key": "aggregator--01", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 1 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--01#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--01-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--01-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 1, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "aggregator--02", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 2 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--02#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--02-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--02-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 2, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "aggregator--03", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 3 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--03#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--03-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--03-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 3, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "aggregator--04", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 4 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--04#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--04-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--04-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 4, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "aggregator--05", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 5 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--05#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--05-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--05-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 5, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "aggregator--06", "kind": "retrieval.aggregator", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Stale aggregator 6 republishing counts without naming a source.", "properties": { "stale": true } } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--06#page", "observed_at": null } ], "confidence": 0.35, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "aggregator" ] }, { "identity_key": "restatement--06-01", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 1 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-01#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-02", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 2 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-02#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-03", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 3 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-03#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-04", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 4 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-04#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-05", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 5 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-05#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-06", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 6 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-06#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-07", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 7 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-07#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-08", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 8 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-08#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "restatement--06-09", "kind": "retrieval.restatement", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Restatement 9 of aggregator 6, carrying no source of its own.", "properties": {} } }, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-09#copy", "observed_at": null } ], "confidence": 0.2, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "fimi", "restatement" ] }, { "identity_key": "host--01", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 1 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--01#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--01", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 1.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--01#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--02", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 2 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--02#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--02", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 2.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--02#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--03", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 3 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--03#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--03", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 3.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--03#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--04", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 4 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--04#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--04", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 4.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--04#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--05", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 5 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--05#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--05", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 5.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--05#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--06", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 6 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--06#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--06", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 6.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--06#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--07", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 7 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--07#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--07", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 7.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--07#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--08", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 8 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--08#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--08", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 8.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--08#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--09", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 9 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--09#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--09", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 9.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--09#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] }, { "identity_key": "host--10", "kind": "retrieval.host", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Command host 10 reused across the intrusion set.", "properties": {} } }, "provenance": [ { "source_id": "netflow", "locator": "host--10#session", "observed_at": null } ], "confidence": 0.8, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "host" ] }, { "identity_key": "artefact--10", "kind": "retrieval.evidence", "schema_version": "1", "content": { "format": "text_and_properties", "value": { "text": "Forensic artefact recovered from command host 10.", "properties": {} } }, "provenance": [ { "source_id": "forensics", "locator": "artefact--10#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "tags": [ "cti", "evidence" ] } ], "relationships": [ { "identity_key": "rel--case-beneficiary-1", "source_key": "case--fimi-01", "target_key": "beneficiary--01", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--01#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-1", "source_key": "beneficiary--01", "target_key": "evidence--filing-01", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-01#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-2", "source_key": "case--fimi-01", "target_key": "beneficiary--02", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--02#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-2", "source_key": "beneficiary--02", "target_key": "evidence--filing-02", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-02#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-3", "source_key": "case--fimi-01", "target_key": "beneficiary--03", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--03#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-3", "source_key": "beneficiary--03", "target_key": "evidence--filing-03", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-03#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-4", "source_key": "case--fimi-01", "target_key": "beneficiary--04", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--04#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-4", "source_key": "beneficiary--04", "target_key": "evidence--filing-04", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-04#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-5", "source_key": "case--fimi-01", "target_key": "beneficiary--05", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--05#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-5", "source_key": "beneficiary--05", "target_key": "evidence--filing-05", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-05#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-6", "source_key": "case--fimi-01", "target_key": "beneficiary--06", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--06#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-6", "source_key": "beneficiary--06", "target_key": "evidence--filing-06", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-06#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-7", "source_key": "case--fimi-01", "target_key": "beneficiary--07", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--07#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-7", "source_key": "beneficiary--07", "target_key": "evidence--filing-07", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-07#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-8", "source_key": "case--fimi-01", "target_key": "beneficiary--08", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--08#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-8", "source_key": "beneficiary--08", "target_key": "evidence--filing-08", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-08#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-9", "source_key": "case--fimi-01", "target_key": "beneficiary--09", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--09#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-9", "source_key": "beneficiary--09", "target_key": "evidence--filing-09", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-09#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-10", "source_key": "case--fimi-01", "target_key": "beneficiary--10", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--10#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-10", "source_key": "beneficiary--10", "target_key": "evidence--filing-10", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-10#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-11", "source_key": "case--fimi-01", "target_key": "beneficiary--11", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--11#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-11", "source_key": "beneficiary--11", "target_key": "evidence--filing-11", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-11#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-beneficiary-12", "source_key": "case--fimi-01", "target_key": "beneficiary--12", "kind": "validated_beneficiary", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "beneficiary--12#record", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--beneficiary-evidence-12", "source_key": "beneficiary--12", "target_key": "evidence--filing-12", "kind": "documented_by", "properties": {}, "provenance": [ { "source_id": "registry", "locator": "evidence--filing-12#filing", "observed_at": null } ], "confidence": 0.9, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-1", "source_key": "case--fimi-01", "target_key": "aggregator--01", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--01#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-1", "source_key": "aggregator--01", "target_key": "restatement--01-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-2", "source_key": "aggregator--01", "target_key": "restatement--01-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-3", "source_key": "aggregator--01", "target_key": "restatement--01-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-4", "source_key": "aggregator--01", "target_key": "restatement--01-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-5", "source_key": "aggregator--01", "target_key": "restatement--01-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-6", "source_key": "aggregator--01", "target_key": "restatement--01-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-7", "source_key": "aggregator--01", "target_key": "restatement--01-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-8", "source_key": "aggregator--01", "target_key": "restatement--01-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-1-9", "source_key": "aggregator--01", "target_key": "restatement--01-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--01-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-2", "source_key": "case--fimi-01", "target_key": "aggregator--02", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--02#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-1", "source_key": "aggregator--02", "target_key": "restatement--02-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-2", "source_key": "aggregator--02", "target_key": "restatement--02-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-3", "source_key": "aggregator--02", "target_key": "restatement--02-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-4", "source_key": "aggregator--02", "target_key": "restatement--02-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-5", "source_key": "aggregator--02", "target_key": "restatement--02-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-6", "source_key": "aggregator--02", "target_key": "restatement--02-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-7", "source_key": "aggregator--02", "target_key": "restatement--02-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-8", "source_key": "aggregator--02", "target_key": "restatement--02-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-2-9", "source_key": "aggregator--02", "target_key": "restatement--02-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--02-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-3", "source_key": "case--fimi-01", "target_key": "aggregator--03", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--03#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-1", "source_key": "aggregator--03", "target_key": "restatement--03-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-2", "source_key": "aggregator--03", "target_key": "restatement--03-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-3", "source_key": "aggregator--03", "target_key": "restatement--03-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-4", "source_key": "aggregator--03", "target_key": "restatement--03-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-5", "source_key": "aggregator--03", "target_key": "restatement--03-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-6", "source_key": "aggregator--03", "target_key": "restatement--03-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-7", "source_key": "aggregator--03", "target_key": "restatement--03-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-8", "source_key": "aggregator--03", "target_key": "restatement--03-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-3-9", "source_key": "aggregator--03", "target_key": "restatement--03-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--03-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-4", "source_key": "case--fimi-01", "target_key": "aggregator--04", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--04#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-1", "source_key": "aggregator--04", "target_key": "restatement--04-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-2", "source_key": "aggregator--04", "target_key": "restatement--04-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-3", "source_key": "aggregator--04", "target_key": "restatement--04-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-4", "source_key": "aggregator--04", "target_key": "restatement--04-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-5", "source_key": "aggregator--04", "target_key": "restatement--04-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-6", "source_key": "aggregator--04", "target_key": "restatement--04-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-7", "source_key": "aggregator--04", "target_key": "restatement--04-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-8", "source_key": "aggregator--04", "target_key": "restatement--04-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-4-9", "source_key": "aggregator--04", "target_key": "restatement--04-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--04-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-5", "source_key": "case--fimi-01", "target_key": "aggregator--05", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--05#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-1", "source_key": "aggregator--05", "target_key": "restatement--05-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-2", "source_key": "aggregator--05", "target_key": "restatement--05-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-3", "source_key": "aggregator--05", "target_key": "restatement--05-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-4", "source_key": "aggregator--05", "target_key": "restatement--05-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-5", "source_key": "aggregator--05", "target_key": "restatement--05-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-6", "source_key": "aggregator--05", "target_key": "restatement--05-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-7", "source_key": "aggregator--05", "target_key": "restatement--05-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-8", "source_key": "aggregator--05", "target_key": "restatement--05-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-5-9", "source_key": "aggregator--05", "target_key": "restatement--05-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--05-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-aggregator-6", "source_key": "case--fimi-01", "target_key": "aggregator--06", "kind": "mentioned_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "aggregator--06#page", "observed_at": null } ], "confidence": 0.4, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-1", "source_key": "aggregator--06", "target_key": "restatement--06-01", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-01#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-2", "source_key": "aggregator--06", "target_key": "restatement--06-02", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-02#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-3", "source_key": "aggregator--06", "target_key": "restatement--06-03", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-03#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-4", "source_key": "aggregator--06", "target_key": "restatement--06-04", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-04#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-5", "source_key": "aggregator--06", "target_key": "restatement--06-05", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-05#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-6", "source_key": "aggregator--06", "target_key": "restatement--06-06", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-06#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-7", "source_key": "aggregator--06", "target_key": "restatement--06-07", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-07#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-8", "source_key": "aggregator--06", "target_key": "restatement--06-08", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-08#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--aggregator-restatement-6-9", "source_key": "aggregator--06", "target_key": "restatement--06-09", "kind": "restated_by", "properties": {}, "provenance": [ { "source_id": "aggregator-feed", "locator": "restatement--06-09#copy", "observed_at": null } ], "confidence": 0.3, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-1", "source_key": "case--cti-01", "target_key": "host--01", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--01#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-1", "source_key": "host--01", "target_key": "artefact--01", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--01#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-2", "source_key": "case--cti-01", "target_key": "host--02", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--02#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-2", "source_key": "host--02", "target_key": "artefact--02", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--02#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-3", "source_key": "case--cti-01", "target_key": "host--03", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--03#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-3", "source_key": "host--03", "target_key": "artefact--03", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--03#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-4", "source_key": "case--cti-01", "target_key": "host--04", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--04#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-4", "source_key": "host--04", "target_key": "artefact--04", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--04#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-5", "source_key": "case--cti-01", "target_key": "host--05", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--05#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-5", "source_key": "host--05", "target_key": "artefact--05", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--05#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-6", "source_key": "case--cti-01", "target_key": "host--06", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--06#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-6", "source_key": "host--06", "target_key": "artefact--06", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--06#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-7", "source_key": "case--cti-01", "target_key": "host--07", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--07#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-7", "source_key": "host--07", "target_key": "artefact--07", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--07#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-8", "source_key": "case--cti-01", "target_key": "host--08", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--08#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-8", "source_key": "host--08", "target_key": "artefact--08", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--08#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-9", "source_key": "case--cti-01", "target_key": "host--09", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--09#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-9", "source_key": "host--09", "target_key": "artefact--09", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--09#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--case-host-10", "source_key": "case--cti-01", "target_key": "host--10", "kind": "observed_host", "properties": {}, "provenance": [ { "source_id": "netflow", "locator": "host--10#session", "observed_at": null } ], "confidence": 0.85, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" }, { "identity_key": "rel--host-artefact-10", "source_key": "host--10", "target_key": "artefact--10", "kind": "yielded", "properties": {}, "provenance": [ { "source_id": "forensics", "locator": "artefact--10#image", "observed_at": null } ], "confidence": 0.88, "valid_from": null, "valid_until": null, "expires_at": null, "lifecycle": "active" } ] }