cti-ATT-CK-v13.1/capec/2.0/course-of-action/course-of-action--05c9f402-bd10-4aba-84d1-3b6a25897c23.json

{
    "id": "bundle--a7435ccd-6e8b-4be7-b58e-a29239e2d038",
    "objects": [
        {
            "created": "2014-06-23T00:00:00.000Z",
            "created_by_ref": "identity--e50ab59c-5c4f-4d40-bf6a-d58418d89bcd",
            "description": "Because Symlink can be modified by an attacker, make sure that the ones you read are located in protected directories.",
            "id": "course-of-action--05c9f402-bd10-4aba-84d1-3b6a25897c23",
            "modified": "2021-10-21T00:00:00.000Z",
            "name": "coa-45-1",
            "object_marking_refs": [
                "marking-definition--17d82bb2-eeeb-4898-bda5-3ddbcd2b799d"
            ],
            "type": "course-of-action",
            "x_capec_version": "3.6"
        }
    ],
    "spec_version": "2.0",
    "type": "bundle"
}