{
  "type": "bundle",
  "id": "bundle--eea9f7bc-8d56-5b40-8b03-289723537cb8",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--070d3e5d-adce-55d3-8703-bd434d546362",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:fa78e30b-9ad3-50c9-8ea4-3b86c91a3446",
      "name": "CrowdStrike",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--5c8eaef2-3c46-595a-848c-879eec9f4208",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "org:3ffa6d56-9460-55ed-90f3-b748ee12c50f",
      "name": "Microsoft",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--53913dcc-c0ab-5d76-8a0c-402141faf61c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:3f241248-b9ca-5856-9b11-72d967bd36c9",
      "name": "CrowdStrike Channel File 291 outage"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--b96bbf1d-3de0-587f-8e9d-143753763fc2",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:cee8ccd6-28ec-5549-8a33-f56ea9bc94f9",
      "name": "CrowdStrike Channel File 291 outage"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--27f7f9c8-e8d6-5cc6-8ee1-4ccc12ebfc3c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:9b476c58-d966-533b-8f94-d399bbaee52d",
      "relationship_type": "affected-organization",
      "source_ref": "incident--53913dcc-c0ab-5d76-8a0c-402141faf61c",
      "target_ref": "identity--070d3e5d-adce-55d3-8703-bd434d546362",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CrowdStrike",
          "url": "https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/",
          "external_id": "cit:a02c509b-b7a6-5eca-8b0c-48c12891533e",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1238a9af7861a34dd305f1cab5f0e6e0f1f09446b93da445a5335adb41dbd6eb"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--7dc033e2-764e-58da-8449-f688cabb0ded",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:411cbafa-5ad0-54ce-bc7d-1a0817ea0b6d",
      "relationship_type": "affected-organization",
      "source_ref": "incident--53913dcc-c0ab-5d76-8a0c-402141faf61c",
      "target_ref": "identity--5c8eaef2-3c46-595a-848c-879eec9f4208",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CrowdStrike",
          "url": "https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/",
          "external_id": "cit:fbf931bd-47f4-5d1e-b794-67464659b4b1",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1238a9af7861a34dd305f1cab5f0e6e0f1f09446b93da445a5335adb41dbd6eb"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--158122a1-05e3-593d-847c-e24988c6b165",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:64c9cbed-bb11-5ceb-8ae5-6c158cb1940e",
      "confidence": 87,
      "external_references": [
        {
          "source_name": "CrowdStrike",
          "url": "https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/",
          "external_id": "cit:f29afa0d-0ead-57c8-82f7-aa50b525a1c8",
          "description": "On July 19, 2024, as part of regular operations, CrowdStrike released a content configuration update (via channel files) for the Windows sensor that resulted in a widespread outage.",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1238a9af7861a34dd305f1cab5f0e6e0f1f09446b93da445a5335adb41dbd6eb"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "NOT an attack — a faulty CrowdStrike Falcon sensor content update caused mass Windows BSOD crashes."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a62ff444-7069-5abd-8816-7b1897433899",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:1d65c8ed-7da8-5065-a0f1-ac53db134ef4",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CrowdStrike",
          "url": "https://www.crowdstrike.com/en-us/blog/channel-file-291-rca-available/",
          "external_id": "cit:07a44dc2-ff06-5c32-9d5d-0c59ca2ff646",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:1238a9af7861a34dd305f1cab5f0e6e0f1f09446b93da445a5335adb41dbd6eb"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the crowdstrike channel file 291 outage involving CrowdStrike, Microsoft."
      }
    }
  ]
}