S5r?S6r@S7rAS8rBS9rCS:rDS;rESrHS?rIS@rJSArKSBrLSCrMSDrNSErOSFrPSGrQ\=\>\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q/rRSHrSSIrTSJrUSKrVSLrWSMrXS2rY\S\T\U\V\W\X\Y/rZSNr[SOr\SPr]SQr^SRr_SSr`STraSUrbSVrcSWrdSXreSYrfSrgSZrhS[riS\rjS]rkS^rlS_rmS`rnSaroSbrpScrqSdrrSersSfrtSgruShrvSirwSjrxSkrySlrzSmr{Snr|/\[P\\P\]P\^P\_P\`P\aP\bP\cP\dP\eP\fP\gP\hP\iP\jP\kP\lP\mP\nP\oP\pP\qP\rP\sP\tP\uP\vP\wP\xP\yP\zP\{P\|Pr}Sor~SIrSprSqrSrrSsrStrSurSvrSwrSxrSyrSzrS{rS2r\~\\\\\\\\\\\\\\/rS|rS}rSJrS2r\\\\/rS~rSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSr/\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\P\PrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrSrS2rSrSrSrSr\\\\\\\\\\\\\\\\\\\\\\/rSrSrSrSrSrSrSrSr\\\\\\\\/rSrSrSrSrSr\\\\\/rSrSrSrSrSr\\\\\/rSrSrSrSrSrSr\\\\\\/rSrSrSrSrSrSrSrSGr\\\\\\\\/rSrSrSrSrSrSrSrSrSrSrSrSGrSGrSGrSGrSGrSGrSGrSGrSGrSGr SGr SGr SGr SGr SGrSGrSGrSGr\\\\\\\\\\\G\G\G\G\G\G\G\G\G\G\ G\ G\ G\ G\ G\G\G\G\/GrSGrSGrSGrSGrSGrSGrSGrSGrSGrSGrSGrG\G\G\G\G\G\G\G\G\G\G\/ GrSGrGSGr GSGr!GSGr"GSGr#GSGr$GSGr%GSGr&GSGr'GSGr(GS Gr)S2Gr*G\G\ G\!G\"G\#G\$G\%G\&G\'G\(G\)G\*/ Gr+GS Gr,GS Gr-GS Gr.GS Gr/GSGr0GSGr1GSGr2G\,G\-G\.G\/G\0G\1G\2/Gr3GSGr4GSGr5GSGr6GSGr7GSGr8GSGr9GSGr:G\4G\5G\6G\7G\8G\9G\:/Gr;GSGrGSGr?GSGr@GSGrAGSGrBS2GrCG\G\?G\@G\AG\BG\C/GrDGSGrEGS GrFGS!GrGS0GrHG\EG\FG\GG\H/GrIGS"GrJGS#GrKGS$GrLG\JG\KG\L/GrMGS%GrNGS&GrOGS'GrPGS(GrQGS)GrRGS*GrSGS+GrTGS,GrUGS-GrVGS.GrWGS/GrXGS0GrYGS1GrZGS2Gr[G\NG\OG\PG\QG\RG\SG\TG\UG\VG\WG\XG\YG\ZG\[/Gr\GS3Gr]GS4Gr^GS5Gr_GS6Gr`GS7GraG\]G\^G\_G\`G\a/GrbGS8GrcGS9GrdGS:GreGS;GrfG\cG\dG\eG\f/GrgGSGrjGS?GrkGS@GrlGSAGrmGSBGrnG\hG\iG\jG\kG\lG\mG\n/GroGgC(Dz& STIX 2.1 open vocabularies and enums facebookldapnisopenidradiusskypetacacstwitterunixz windows-localzwindows-domain accidentalcoercion dominanceideology notorietyzorganizational-gainz personal-gainzpersonal-satisfactionrevenge unpredictable individualclubcontestteam organization governmentz AES-256-GCMzChaCha20-Poly1305zmime-type-indicatedznew-sdoznew-scoznew-srozproperty-extensionztoplevel-property-extensionzsuspicious-activityzmalware-analysis unspecifiedMD5zSHA-1zSHA-256zSHA-512zSHA3-256zSHA3-512SSDEEPTLSHgroupsystemclassunknown applescriptbashczc++zc#gojava javascriptluaz objective-cperlphp powershellpythonrubyscalaswift typescriptz visual-basiczx86-32zx86-64zanomalous-activity anonymizationbenign compromisedzmalicious-activity attribution agriculture aerospace automotivechemical commercialcommunications constructiondefense educationenergy entertainmentzfinancial-serviceszemergency-serviceszgovernment-nationalzgovernment-regionalzgovernment-localzgovernment-public-services healthcarezhospitality-leisureinfrastructuredamsnuclearwater insurance manufacturingminingz non-profitpharmaceuticalsretail technologytelecommunicationstransportation utilities amplificationbotnetzcommand-and-controlzcontrol-system exfiltrationfirewallzhosting-malwarezhosting-target-listsphishingreconnaissancezrouters-switchesstaging workstation malicious suspiciouszaccesses-remote-machineszanti-debuggingzanti-disassemblyzanti-emulationzanti-memory-forensicsz anti-sandboxzanti-vmzcaptures-input-peripheralszcaptures-output-peripheralszcaptures-system-state-datazcleans-traces-of-infectionz commits-fraudzcommunicates-with-c2zcompromises-data-availabilityzcompromises-data-integrityzcompromises-system-availabilityzcontrols-local-machinezdegrades-security-softwarezdegrades-system-updateszdetermines-c2-serverz emails-spamzescalates-privilegesz evades-avzexfiltrates-datazfingerprints-hostzhides-artifactszhides-executing-codez infects-fileszinfects-remote-machineszinstalls-other-componentszpersists-after-system-rebootzprevents-artifact-accesszprevents-artifact-deletionzprobes-network-environmentz self-modifiesz!steals-authentication-credentialsz%violates-system-operational-integrityadwarebackdoorbotbootkitddos downloaderdropperz exploit-kit keylogger ransomwarezremote-access-trojanzresource-exploitationzrogue-security-softwarerootkitzscreen-capturespywaretrojanviruswebshellwiperworm AF_UNSPECAF_INETAF_IPX AF_APPLETALK AF_NETBIOSAF_INET6AF_IRDAAF_BTH SOCK_STREAM SOCK_DGRAMSOCK_RAWSOCK_RDMSOCK_SEQPACKETzstrongly-disagreedisagreeneutralagreezstrongly-agreestixpcresigmasnortsuricatayaraalphaarmzia-64mipspowerpcsparcx86africazeastern-africaz middle-africaznorthern-africazsouthern-africazwestern-africaamericaszlatin-america-caribbeanz south-america caribbeanzcentral-americaznorthern-americaasiaz central-asiaz eastern-asiaz southern-asiazsouth-eastern-asiaz western-asiaeuropezeastern-europeznorthern-europezsouthern-europezwestern-europeoceania antarcticazaustralia-new-zealand melanesia micronesia polynesiazattack-patterncampaignidentity indicatorz intrusion-setmalwarez observed-dataz threat-actorz threat-reporttool vulnerabilityactivist competitorzcrime-syndicatecriminalhackerzinsider-accidentalzinsider-disgruntledz nation-statesensationalistspy terroristagentdirector independentzinfrastructure-architectzinfrastructure-operatorzmalware-authorsponsornoneminimal intermediateadvancedexpert innovator strategiczdenial-of-service exploitationzinformation-gatheringznetwork-capturezcredential-exploitationz remote-accesszvulnerability-scanninglowmediumhighdllexesysREG_NONEREG_SZ REG_EXPAND_SZ REG_BINARY REG_DWORDREG_DWORD_BIG_ENDIANREG_DWORD_LITTLE_ENDIANREG_LINK REG_MULTI_SZREG_RESOURCE_LISTREG_FULL_RESOURCE_DESCRIPTIONREG_RESOURCE_REQUIREMENTS_LIST REG_QWORDREG_INVALID_TYPESERVICE_AUTO_STARTSERVICE_BOOT_STARTSERVICE_DEMAND_STARTSERVICE_DISABLEDSERVICE_SYSTEM_ALERTSERVICE_KERNEL_DRIVERSERVICE_FILE_SYSTEM_DRIVERSERVICE_WIN32_OWN_PROCESSSERVICE_WIN32_SHARE_PROCESSSERVICE_CONTINUE_PENDINGSERVICE_PAUSE_PENDINGSERVICE_PAUSEDSERVICE_RUNNINGSERVICE_START_PENDINGSERVICE_STOP_PENDINGSERVICE_STOPPEDN(p__doc__ACCOUNT_TYPE_FACEBOOKACCOUNT_TYPE_LDAPACCOUNT_TYPE_NISACCOUNT_TYPE_OPENIDACCOUNT_TYPE_RADIUSACCOUNT_TYPE_SKYPEACCOUNT_TYPE_TACACSACCOUNT_TYPE_TWITTERACCOUNT_TYPE_UNIXACCOUNT_TYPE_WINDOWS_LOCALACCOUNT_TYPE_WINDOWS_DOMAIN ACCOUNT_TYPEATTACK_MOTIVATION_ACCIDENTALATTACK_MOTIVATION_COERCIONATTACK_MOTIVATION_DOMINANCEATTACK_MOTIVATION_IDEOLOGYATTACK_MOTIVATION_NOTORIETY%ATTACK_MOTIVATION_ORGANIZATIONAL_GAINATTACK_MOTIVATION_PERSONAL_GAIN'ATTACK_MOTIVATION_PERSONAL_SATISFACTIONATTACK_MOTIVATION_REVENGEATTACK_MOTIVATION_UNPREDICTABLEATTACK_MOTIVATION ATTACK_RESOURCE_LEVEL_INDIVIDUALATTACK_RESOURCE_LEVEL_CLUBATTACK_RESOURCE_LEVEL_CONTESTATTACK_RESOURCE_LEVEL_TEAM"ATTACK_RESOURCE_LEVEL_ORGANIZATION ATTACK_RESOURCE_LEVEL_GOVERNMENTATTACK_RESOURCE_LEVEL ENCRYPTION_ALGORITHM_AES_256_GCM&ENCRYPTION_ALGORITHM_CHACHA20_POLY1305(ENCRYPTION_ALGORITHM_MIME_TYPE_INDICATEDENCRYPTION_ALGORITHMEXTENSION_TYPE_NEW_SDOEXTENSION_TYPE_NEW_SCOEXTENSION_TYPE_NEW_SRO!EXTENSION_TYPE_PROPERTY_EXTENSION*EXTENSION_TYPE_TOPLEVEL_PROPERTY_EXTENSIONEXTENSION_TYPE$GROUPING_CONTEXT_SUSPICIOUS_ACTIVITY!GROUPING_CONTEXT_MALWARE_ANALYSISGROUPING_CONTEXT_UNSPECIFIEDGROUPING_CONTEXTHASHING_ALGORITHM_MD5HASHING_ALGORITHM_SHA_1HASHING_ALGORITHM_SHA_256HASHING_ALGORITHM_SHA_512HASHING_ALGORITHM_SHA3_256HASHING_ALGORITHM_SHA3_512HASHING_ALGORITHM_SSDEEPHASHING_ALGORITHM_TLSHHASHING_ALGORITHMIDENTITY_CLASS_INDIVIDUALIDENTITY_CLASS_GROUPIDENTITY_CLASS_SYSTEMIDENTITY_CLASS_ORGANIZATIONIDENTITY_CLASS_CLASSIDENTITY_CLASS_UNKNOWNIDENTITY_CLASS#IMPLEMENTATION_LANGUAGE_APPLESCRIPTIMPLEMENTATION_LANGUAGE_BASHIMPLEMENTATION_LANGUAGE_C!IMPLEMENTATION_LANGUAGE_CPLUSPLUSIMPLEMENTATION_LANGUAGE_CSHARPIMPLEMENTATION_LANGUAGE_GOIMPLEMENTATION_LANGUAGE_JAVA"IMPLEMENTATION_LANGUAGE_JAVASCRIPTIMPLEMENTATION_LANGUAGE_LUA#IMPLEMENTATION_LANGUAGE_OBJECTIVE_CIMPLEMENTATION_LANGUAGE_PERLIMPLEMENTATION_LANGUAGE_PHP"IMPLEMENTATION_LANGUAGE_POWERSHELLIMPLEMENTATION_LANGUAGE_PYTHONIMPLEMENTATION_LANGUAGE_RUBYIMPLEMENTATION_LANGUAGE_SCALAIMPLEMENTATION_LANGUAGE_SWIFT"IMPLEMENTATION_LANGUAGE_TYPESCRIPT$IMPLEMENTATION_LANGUAGE_VISUAL_BASICIMPLEMENTATION_LANGUAGE_X86_32IMPLEMENTATION_LANGUAGE_X86_64IMPLEMENTATION_LANGUAGE!INDICATOR_TYPE_ANOMALOUS_ACTIVITYINDICATOR_TYPE_ANONYMIZATIONINDICATOR_TYPE_BENIGNINDICATOR_TYPE_COMPROMISED!INDICATOR_TYPE_MALICIOUS_ACTIVITYINDICATOR_TYPE_ATTRIBUTIONINDICATOR_TYPE_UNKNOWNINDICATOR_TYPEINDUSTRY_SECTOR_AGRICULTUREINDUSTRY_SECTOR_AEROSPACEINDUSTRY_SECTOR_AUTOMOTIVEINDUSTRY_SECTOR_CHEMICALINDUSTRY_SECTOR_COMMERCIALINDUSTRY_SECTOR_COMMUNICATIONSINDUSTRY_SECTOR_CONSTRUCTIONINDUSTRY_SECTOR_DEFENSEINDUSTRY_SECTOR_EDUCATIONINDUSTRY_SECTOR_ENERGYINDUSTRY_SECTOR_ENTERTAINMENT"INDUSTRY_SECTOR_FINANCIAL_SERVICESINDUSTRY_SECTOR_GOVERNMENT"INDUSTRY_SECTOR_EMERGENCY_SERVICES#INDUSTRY_SECTOR_GOVERNMENT_NATIONAL#INDUSTRY_SECTOR_GOVERNMENT_REGIONAL INDUSTRY_SECTOR_GOVERNMENT_LOCAL*INDUSTRY_SECTOR_GOVERNMENT_PUBLIC_SERVICESINDUSTRY_SECTOR_HEALTHCARE#INDUSTRY_SECTOR_HOSPITALITY_LEISUREINDUSTRY_SECTOR_INFRASTRUCTUREINDUSTRY_SECTOR_DAMSINDUSTRY_SECTOR_NUCLEARINDUSTRY_SECTOR_WATERINDUSTRY_SECTOR_INSURANCEINDUSTRY_SECTOR_MANUFACTURINGINDUSTRY_SECTOR_MININGINDUSTRY_SECTOR_NON_PROFITINDUSTRY_SECTOR_PHARMACEUTICALSINDUSTRY_SECTOR_RETAILINDUSTRY_SECTOR_TECHNOLOGY"INDUSTRY_SECTOR_TELECOMMUNICATIONSINDUSTRY_SECTOR_TRANSPORTATIONINDUSTRY_SECTOR_UTILITIESINDUSTRY_SECTOR!INFRASTRUCTURE_TYPE_AMPLIFICATION!INFRASTRUCTURE_TYPE_ANONYMIZATIONINFRASTRUCTURE_TYPE_BOTNET'INFRASTRUCTURE_TYPE_COMMAND_AND_CONTROL"INFRASTRUCTURE_TYPE_CONTROL_SYSTEM INFRASTRUCTURE_TYPE_EXFILTRATIONINFRASTRUCTURE_TYPE_FIREWALL#INFRASTRUCTURE_TYPE_HOSTING_MALWARE(INFRASTRUCTURE_TYPE_HOSTING_TARGET_LISTSINFRASTRUCTURE_TYPE_PHISHING"INFRASTRUCTURE_TYPE_RECONNAISSANCE$INFRASTRUCTURE_TYPE_ROUTERS_SWITCHESINFRASTRUCTURE_TYPE_STAGINGINFRASTRUCTURE_TYPE_WORKSTATIONINFRASTRUCTURE_TYPE_UNKNOWNINFRASTRUCTURE_TYPEMALWARE_RESULT_MALICIOUSMALWARE_RESULT_SUSPICIOUSMALWARE_RESULT_BENIGNMALWARE_RESULT_UNKNOWNMALWARE_RESULT-MALWARE_CAPABILITIES_ACCESSES_REMOTE_MACHINES#MALWARE_CAPABILITIES_ANTI_DEBUGGING%MALWARE_CAPABILITIES_ANTI_DISASSEMBLY#MALWARE_CAPABILITIES_ANTI_EMULATION*MALWARE_CAPABILITIES_ANTI_MEMORY_FORENSICS!MALWARE_CAPABILITIES_ANTI_SANDBOXMALWARE_CAPABILITIES_ANTI_VM/MALWARE_CAPABILITIES_CAPTURES_INPUT_PERIPHERALS0MALWARE_CAPABILITIES_CAPTURES_OUTPUT_PERIPHERALS/MALWARE_CAPABILITIES_CAPTURES_SYSTEM_STATE_DATA/MALWARE_CAPABILITIES_CLEANS_TRACES_OF_INFECTION"MALWARE_CAPABILITIES_COMMITS_FRAUD)MALWARE_CAPABILITIES_COMMUNICATES_WITH_C22MALWARE_CAPABILITIES_COMPROMISES_DATA_AVAILABILITY/MALWARE_CAPABILITIES_COMPROMISES_DATA_INTEGRITY4MALWARE_CAPABILITIES_COMPROMISES_SYSTEM_AVAILABILITY+MALWARE_CAPABILITIES_CONTROLS_LOCAL_MACHINE/MALWARE_CAPABILITIES_DEGRADES_SECURITY_SOFTWARE,MALWARE_CAPABILITIES_DEGRADES_SYSTEM_UPDATES)MALWARE_CAPABILITIES_DETERMINES_C2_SERVER MALWARE_CAPABILITIES_EMAILS_SPAM)MALWARE_CAPABILITIES_ESCALATES_PRIVILEGESMALWARE_CAPABILITIES_EVADES_AV%MALWARE_CAPABILITIES_EXFILTRATES_DATA&MALWARE_CAPABILITIES_FINGERPRINTS_HOST$MALWARE_CAPABILITIES_HIDES_ARTIFACTS)MALWARE_CAPABILITIES_HIDES_EXECUTING_CODE"MALWARE_CAPABILITIES_INFECTS_FILES,MALWARE_CAPABILITIES_INFECTS_REMOTE_MACHINES.MALWARE_CAPABILITIES_INSTALLS_OTHER_COMPONENTS1MALWARE_CAPABILITIES_PERSISTS_AFTER_SYSTEM_REBOOT-MALWARE_CAPABILITIES_PREVENTS_ARTIFACT_ACCESS/MALWARE_CAPABILITIES_PREVENTS_ARTIFACT_DELETION/MALWARE_CAPABILITIES_PROBES_NETWORK_ENVIRONMENT"MALWARE_CAPABILITIES_SELF_MODIFIES6MALWARE_CAPABILITIES_STEALS_AUTHENTICATION_CREDENTIALS:MALWARE_CAPABILITIES_VIOLATES_SYSTEM_OPERATIONAL_INTEGRITYMALWARE_CAPABILITIESMALWARE_TYPE_ADWAREMALWARE_TYPE_BACKDOORMALWARE_TYPE_BOTMALWARE_TYPE_BOOTKITMALWARE_TYPE_DDOSMALWARE_TYPE_DOWNLOADERMALWARE_TYPE_DROPPERMALWARE_TYPE_EXPLOIT_KITMALWARE_TYPE_KEYLOGGERMALWARE_TYPE_RANSOMWARE!MALWARE_TYPE_REMOTE_ACCESS_TROJAN"MALWARE_TYPE_RESOURCE_EXPLOITATION$MALWARE_TYPE_ROGUE_SECURITY_SOFTWAREMALWARE_TYPE_ROOTKITMALWARE_TYPE_SCREEN_CAPTUREMALWARE_TYPE_SPYWAREMALWARE_TYPE_TROJANMALWARE_TYPE_UNKNOWNMALWARE_TYPE_VIRUSMALWARE_TYPE_WEBSHELLMALWARE_TYPE_WIPERMALWARE_TYPE_WORM MALWARE_TYPE'NETWORK_SOCKET_ADDRESS_FAMILY_AF_UNSPEC%NETWORK_SOCKET_ADDRESS_FAMILY_AF_INET$NETWORK_SOCKET_ADDRESS_FAMILY_AF_IPX*NETWORK_SOCKET_ADDRESS_FAMILY_AF_APPLETALK(NETWORK_SOCKET_ADDRESS_FAMILY_AF_NETBIOS&NETWORK_SOCKET_ADDRESS_FAMILY_AF_INET6%NETWORK_SOCKET_ADDRESS_FAMILY_AF_IRDA$NETWORK_SOCKET_ADDRESS_FAMILY_AF_BTHNETWORK_SOCKET_ADDRESS_FAMILYNETWORK_SOCKET_TYPE_SOCK_STREAMNETWORK_SOCKET_TYPE_SOCK_DGRAMNETWORK_SOCKET_TYPE_SOCK_RAWNETWORK_SOCKET_TYPE_SOCK_RDM"NETWORK_SOCKET_TYPE_SOCK_SEQPACKETNETWORK_SOCKET_TYPEOPINION_STRONGLY_DISAGREEOPINION_DISAGREEOPINION_NEUTRAL OPINION_AGREEOPINION_STRONGLY_AGREEOPINIONPATTERN_TYPE_STIXPATTERN_TYPE_PCREPATTERN_TYPE_SIGMAPATTERN_TYPE_SNORTPATTERN_TYPE_SURICATAPATTERN_TYPE_YARA PATTERN_TYPEPROCESSOR_ARCHITECTURE_ALPHAPROCESSOR_ARCHITECTURE_ARMPROCESSOR_ARCHITECTURE_IA_64PROCESSOR_ARCHITECTURE_MIPSPROCESSOR_ARCHITECTURE_POWERPCPROCESSOR_ARCHITECTURE_SPARCPROCESSOR_ARCHITECTURE_X86PROCESSOR_ARCHITECTURE_X86_64PROCESSOR_ARCHITECTURE REGION_AFRICAREGION_EASTERN_AFRICAREGION_MIDDLE_AFRICAREGION_NORTHERN_AFRICAREGION_SOUTHERN_AFRICAREGION_WESTERN_AFRICAREGION_AMERICASREGION_LATIN_AMERICA_CARIBBEANREGION_SOUTH_AMERICAREGION_CARIBBEANREGION_CENTRAL_AMERICAREGION_NORTHERN_AMERICA REGION_ASIAREGION_CENTRAL_ASIAREGION_EASTERN_ASIAREGION_SOUTHERN_ASIAREGION_SOUTH_EASTERN_ASIAREGION_WESTERN_ASIA REGION_EUROPEREGION_EASTERN_EUROPEREGION_NORTHERN_EUROPEREGION_SOUTHERN_EUROPEREGION_WESTERN_EUROPEREGION_OCEANIAREGION_ANTARCTICAREGION_AUSTRALIA_NEW_ZEALANDREGION_MELANESIAREGION_MICRONESIAREGION_POLYNESIAREGIONREPORT_TYPE_ATTACK_PATTERNREPORT_TYPE_CAMPAIGNREPORT_TYPE_IDENTITYREPORT_TYPE_INDICATORREPORT_TYPE_INTRUSION_SETREPORT_TYPE_MALWAREREPORT_TYPE_OBSERVED_DATAREPORT_TYPE_THREAT_ACTORREPORT_TYPE_THREAT_REPORTREPORT_TYPE_TOOLREPORT_TYPE_VULNERABILITY REPORT_TYPETHREAT_ACTOR_TYPE_ACTIVISTTHREAT_ACTOR_TYPE_COMPETITOR!THREAT_ACTOR_TYPE_CRIME_SYNDICATETHREAT_ACTOR_TYPE_CRIMINALTHREAT_ACTOR_TYPE_HACKER$THREAT_ACTOR_TYPE_INSIDER_ACCIDENTAL%THREAT_ACTOR_TYPE_INSIDER_DISGRUNTLEDTHREAT_ACTOR_TYPE_NATION_STATE THREAT_ACTOR_TYPE_SENSATIONALISTTHREAT_ACTOR_TYPE_SPYTHREAT_ACTOR_TYPE_TERRORISTTHREAT_ACTOR_TYPE_UNKNOWNTHREAT_ACTOR_TYPETHREAT_ACTOR_ROLE_AGENTTHREAT_ACTOR_ROLE_DIRECTORTHREAT_ACTOR_ROLE_INDEPENDENT*THREAT_ACTOR_ROLE_INFRASTRUCTURE_ARCHITECT)THREAT_ACTOR_ROLE_INFRASTRUCTURE_OPERATOR THREAT_ACTOR_ROLE_MALWARE_AUTHORTHREAT_ACTOR_ROLE_SPONSORTHREAT_ACTOR_ROLE THREAT_ACTOR_SOPHISTICATION_NONE#THREAT_ACTOR_SOPHISTICATION_MINIMAL(THREAT_ACTOR_SOPHISTICATION_INTERMEDIATE$THREAT_ACTOR_SOPHISTICATION_ADVANCED"THREAT_ACTOR_SOPHISTICATION_EXPERT%THREAT_ACTOR_SOPHISTICATION_INNOVATOR%THREAT_ACTOR_SOPHISTICATION_STRATEGICTHREAT_ACTOR_SOPHISTICATIONTOOL_TYPE_DENIAL_OF_SERVICETOOL_TYPE_EXPLOITATIONTOOL_TYPE_INFORMATION_GATHERINGTOOL_TYPE_NETWORK_CAPTURE!TOOL_TYPE_CREDENTIAL_EXPLOITATIONTOOL_TYPE_REMOTE_ACCESS TOOL_TYPE_VULNERABILITY_SCANNINGTOOL_TYPE_UNKNOWN TOOL_TYPEWINDOWS_INTEGRITY_LEVEL_LOWWINDOWS_INTEGRITY_LEVEL_MEDIUMWINDOWS_INTEGRITY_LEVEL_HIGHWINDOWS_INTEGRITY_LEVEL_SYSTEMWINDOWS_INTEGRITY_LEVELWINDOWS_PEBINARY_TYPE_DLLWINDOWS_PEBINARY_TYPE_EXEWINDOWS_PEBINARY_TYPE_SYSWINDOWS_PEBINARY_TYPE"WINDOWS_REGISTRY_DATATYPE_REG_NONE WINDOWS_REGISTRY_DATATYPE_REG_SZ'WINDOWS_REGISTRY_DATATYPE_REG_EXPAND_SZ$WINDOWS_REGISTRY_DATATYPE_REG_BINARY#WINDOWS_REGISTRY_DATATYPE_REG_DWORD.WINDOWS_REGISTRY_DATATYPE_REG_DWORD_BIG_ENDIAN1WINDOWS_REGISTRY_DATATYPE_REG_DWORD_LITTLE_ENDIAN"WINDOWS_REGISTRY_DATATYPE_REG_LINK&WINDOWS_REGISTRY_DATATYPE_REG_MULTI_SZ+WINDOWS_REGISTRY_DATATYPE_REG_RESOURCE_LIST7WINDOWS_REGISTRY_DATATYPE_REG_FULL_RESOURCE_DESCRIPTION8WINDOWS_REGISTRY_DATATYPE_REG_RESOURCE_REQUIREMENTS_LIST#WINDOWS_REGISTRY_DATATYPE_REG_QWORD*WINDOWS_REGISTRY_DATATYPE_REG_INVALID_TYPEWINDOWS_REGISTRY_DATATYPE-WINDOWS_SERVICE_START_TYPE_SERVICE_AUTO_START-WINDOWS_SERVICE_START_TYPE_SERVICE_BOOT_START/WINDOWS_SERVICE_START_TYPE_SERVICE_DEMAND_START+WINDOWS_SERVICE_START_TYPE_SERVICE_DISABLED/WINDOWS_SERVICE_START_TYPE_SERVICE_SYSTEM_ALERTWINDOWS_SERVICE_START_TYPE*WINDOWS_SERVICE_TYPE_SERVICE_KERNEL_DRIVER/WINDOWS_SERVICE_TYPE_SERVICE_FILE_SYSTEM_DRIVER.WINDOWS_SERVICE_TYPE_SERVICE_WIN32_OWN_PROCESS0WINDOWS_SERVICE_TYPE_SERVICE_WIN32_SHARE_PROCESSWINDOWS_SERVICE_TYPE/WINDOWS_SERVICE_STATUS_SERVICE_CONTINUE_PENDING,WINDOWS_SERVICE_STATUS_SERVICE_PAUSE_PENDING%WINDOWS_SERVICE_STATUS_SERVICE_PAUSED&WINDOWS_SERVICE_STATUS_SERVICE_RUNNING,WINDOWS_SERVICE_STATUS_SERVICE_START_PENDING+WINDOWS_SERVICE_STATUS_SERVICE_STOP_PENDING&WINDOWS_SERVICE_STATUS_SERVICE_STOPPEDWINDOWS_SERVICE_STATUSI/home/james-whalen/.local/lib/python3.13/site-packages/stix2/v21/vocab.pyr<s< # ,.   ,')')(=%"1*A'%"1!)#+# $0 # )#%3"#/ %!&$ $1 )<&+@(%*,#""$8!-J*%. (=$$6!,)% !%%''# ) ," '4#%$)!!%!%%1"#&3#%#%1"!)% ' '%1"'5$!)!)( %" &' &" !!&(""+2%9!. *$8!*"& %,')%)!1-#'! /%9")%9"&;#&;##5 -I*)&;#!1#' /!)"3!)%9"!1'#### #  # # #!####"#'##'#(# (!#"%##$/%#&'#(()#*#+#,-#./#01#23#4"5#67#89#:$;#<=#>?#@'A#B#C#DE#L%4!$3!%*?'%5"#1 )&7#+A()%5"'9$'"/'&%+&$ ', &(#&'( " 1K-&6#(:%&6#-D*$2!(2N/3P02N/2N/%4",B)5T22N/7X4.F+2N//H,,B)#0 ,B)!,(:%)<&'8$,B)%4"/H,1L.4R10J-2N/2N/%4"9\6=d:&1&'&*&( & / & & &!&4&5&4&4&'&.&7&4& 9!&"0#&$4%&&1'&(.)&*%+&,.-&.#/&0*1&2+3&4)5&6.7&8'9&:1;&<3=&>6?&@2A&B4C&D4E&F'G&H;I&J?K&R" & ($&$:!%<"'@$ .  "%&(- 4+6'(1%'/$-;*+7()3&(1%'/$,)(.,*)( !#0!-))%5"$"  & 0 )  "   '"&$!*&" (! " !  (&**(!:&*, $$&0$ (**( 6 " ; B.!!#++)++  (+$5!'#';$(=%!/#3 )% %()"$  "' --G*,E)#3 %!.-$$* &/#+9('1$%-"(3%(3%%',(&))2'"9-$=!)#;  #%$  $!)%!) " " "!!&0"#+ *9''3$&1#1G.4M1%/")7&.A+:Y7;[8&1#-?*'$+('25&*/;<'.$1E-0D-2H/.@+2H/213/3 .E*2N/1L.3P0/324 3M//F,(8%):&/F,.D+):&40)*0/*r: