cti-ATT-CK-v13.1/enterprise-attack/relationship/relationship--00a4a29f-bbc3-45aa-82ad-7adb0c67a7db.json

{
    "type": "bundle",
    "id": "bundle--0cafc6e9-5edf-49fb-9c94-0fb17c007eec",
    "spec_version": "2.0",
    "objects": [
        {
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "id": "relationship--00a4a29f-bbc3-45aa-82ad-7adb0c67a7db",
            "type": "relationship",
            "created": "2022-03-30T14:26:51.849Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "modified": "2022-03-30T14:26:51.849Z",
            "description": "Monitor for attempts to access SYSVOL that involve searching for XML files.",
            "source_ref": "x-mitre-data-component--235b7491-2d2b-4617-9a52-3c0783680f71",
            "target_ref": "attack-pattern--8d7bd4f5-3a89-4453-9c82-2c8894d5655e",
            "relationship_type": "detects",
            "x_mitre_attack_spec_version": "2.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}