{ "type": "bundle", "id": "bundle--2e295321-79e2-44af-b0b3-7e2a53a65f8e", "spec_version": "2.0", "objects": [ { "type": "relationship", "id": "relationship--0278ddbc-67d5-444d-8082-bf9974dee920", "created": "2022-05-11T16:22:58.808Z", "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "revoked": false, "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "modified": "2022-10-14T16:47:45.775Z", "description": "Monitor for an authentication attempt by a user that may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.", "relationship_type": "detects", "source_ref": "x-mitre-data-component--a953ca55-921a-44f7-9b8d-3d40141aa17e", "target_ref": "attack-pattern--cd2c76a4-5e23-4ca5-9c40-d5e0604f7101", "x_mitre_deprecated": false, "x_mitre_version": "1.0", "x_mitre_attack_spec_version": "2.1.0", "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5" } ] }