{
    "type": "bundle",
    "id": "bundle--187cf899-c568-4d19-893f-ba07e72ba4e5",
    "spec_version": "2.0",
    "objects": [
        {
            "type": "relationship",
            "id": "relationship--0e275c19-7688-47f8-8cd5-85eaacec465b",
            "created": "2022-05-11T16:22:58.807Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "revoked": false,
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "modified": "2022-09-26T14:34:04.450Z",
            "description": "Monitor industrial process history data for events that correspond with command message functions, such as setpoint modification or changes to system status for key devices. This will not directly detect the technique\u2019s execution, but instead may provide additional evidence that the technique has been used and may complement other detections.",
            "relationship_type": "detects",
            "source_ref": "x-mitre-data-component--931b3fc6-ad68-42a8-9018-e98515eedc95",
            "target_ref": "attack-pattern--40b300ba-f553-48bf-862e-9471b220d455",
            "x_mitre_deprecated": false,
            "x_mitre_version": "1.0",
            "x_mitre_attack_spec_version": "2.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5"
        }
    ]
}