{
  "type": "bundle",
  "id": "bundle--b4db6f6f-817f-534c-896f-e0388a2d313c",
  "objects": [
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--45e96bb3-f766-5db0-8ff0-9c859191bbfc",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "inc:1176fb37-3bb4-5941-b6b9-d218514ca967",
      "name": "Volt Typhoon critical-infrastructure campaign"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--60525f04-814e-5d97-8e6a-eb198461de1c",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "brh:af66d2ab-e856-512d-8130-33b0c086bb1a",
      "name": "Volt Typhoon critical-infrastructure campaign"
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--43907520-ab02-589a-82fb-5f27cacf00c5",
      "created": "2026-09-18T12:00:00Z",
      "modified": "2026-09-18T12:00:00Z",
      "x_ally_original_id": "clm:a7310904-71a2-535a-891a-6a2d366d4630",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/analysis-reports/ar24-038a",
          "external_id": "cit:14947244-51d7-5945-82a3-00dbaddacb54",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:011c65c455fa8f86c4fdcee9f11e231d34a1aaddba28601c811a09c3675d3d24"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The reviewed source documents the volt typhoon critical-infrastructure campaign involving Volt Typhoon."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--4f6bbfb5-1a8a-5139-8567-87a78cb1bfc0",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:f9234515-6077-507a-b9e8-be2f6a0a5919",
      "confidence": 83,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/analysis-reports/ar24-038a",
          "external_id": "cit:886c6ea0-ec4a-5e5c-bda6-511e6a9c121d",
          "description": "--------- ---------------------------------------------------------------------------------------------------------------------------------- Name eaef901b31b5835035b75302f94fee27288ce46971c6db6221ecbea9ba7ff9d0 Size 20480 bytes Type PE32 executable (console) Intel 80386, for MS Windows, UPX compressed MD5 3a97d9b6f17754dcd38ca7fc89caab04 SHA1 ffb1d8ea3039d3d5eb7196d27f5450cac0ea4f34 SHA256 eaef901b31b5835035b75302f94fee27288ce46971c6db6221ecbea9ba7ff9d0 SHA512 d99941e4445efed5d4e407f91a9e5bba08d1be3f0dab065d1bfb4e70ab48d6526a730233d6889ba58de449f622e6a14e99dab853d40fc30a508627fd2735c973 ssdeep 384:ahXoLj9Zez0Bm4SUZa8WLLXyjSL2RtfAwj/yneIMUogQ:ahXoLhZez0m4SIabLLCmL2Rvj/yeIEg Entropy 7.297754 --------- ----------------------------------------------------------------------------------------------------------------------------------",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:011c65c455fa8f86c4fdcee9f11e231d34a1aaddba28601c811a09c3675d3d24"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Not a single discrete disruption — evidence of pre-positioning for potential future disruption."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--a1e82a0d-e62f-57fd-8024-3abc2a4d0148",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:79e80dfb-5598-5bfe-8456-54d0a398e98b",
      "confidence": 82,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/analysis-reports/ar24-038a",
          "external_id": "cit:591f8815-e02a-5ff7-8bff-30e464f14919",
          "description": "Nation-State Threats , Cyber Threats and Response , Incident Response",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:011c65c455fa8f86c4fdcee9f11e231d34a1aaddba28601c811a09c3675d3d24"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "Chinese state-linked; living-off-the-land techniques for long-term pre-positioning."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--acfe218c-0ee9-5ca4-8364-a2a35cfda4f0",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "clm:6e4851d4-46e5-501a-92c7-4b0d367a6e50",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "CISA",
          "url": "https://www.cisa.gov/news-events/analysis-reports/ar24-038a",
          "external_id": "cit:a7afd65e-5669-5bd6-ad28-027ef2cb7f41",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:011c65c455fa8f86c4fdcee9f11e231d34a1aaddba28601c811a09c3675d3d24"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2024-02-07"
      }
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--1f53949d-ae41-5e15-872e-baefb0c4d5eb",
      "created": "2026-09-19T12:00:00Z",
      "modified": "2026-09-19T12:00:00Z",
      "x_ally_original_id": "evt:1d2a43f2-33c9-5434-bb12-76c0daf01296",
      "name": "Documented public update"
    }
  ]
}