{"schema":"sb.node.v1","id":"sb:e/8463eb9b7314c38fc1314155","kind":"entity","label":{"text":"mandiant","locale":"en"},"identity":{"anchor":"label:en:mandiant","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-09T13:18:22.628694+00:00","snapshot":"deploy 0ebbe1d67f518b230e852d6f2f118bb8b4eafe4d"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":111,"separatePublishers":28,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim"},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-09-08","to":"2026-10-08","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.288: about 71% of mentions carry no typed assertion"]}},"dimensions":{"domains":["crypto_defi","cybersecurity","auto"],"activeDays":22,"assertions":{"military-action":14,"utterance":7,"price-threshold":5,"funding-round":4,"ipo-listing":1,"sports-outcome":1}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":12,"byKind":{"observation":12},"items":[{"id":"sb:o/ab35d102655eb14993088a9c","kind":"observation","label":"The Crypto Times · 2026-09-30 · Bitget $387.5M Hack: SlowMist and Mandiant Say Zero-Day Attack Began Weeks Before Theft","url":"https://www.cryptotimes.io/2026/09/30/bitget-387-5m-hack-slowmist-and-mandiant-say-zero-day-attack-began-weeks-before-theft/"},{"id":"sb:o/e50780c2bb84383df51165cd","kind":"observation","label":"Tekedia · 2026-09-28 · ShinyHunters Renews Global Attacks on Oracle PeopleSoft Flaw, Google’s Mandiant Warns","url":"https://www.tekedia.com/shinyhunters-renews-global-attacks-on-oracle-peoplesoft-flaw-googles-mandiant-warns/"},{"id":"sb:o/e296071562024b309f96dff2","kind":"observation","label":"Startup Fortune · 2026-10-08 · FBI fires Accenture contractor after ShinyHunters breach exposes agents","url":"https://startupfortune.com/fbi-fires-accenture-contractor-after-shinyhunters-breach-exposes-agents/"},{"id":"sb:o/93f629e0a210d4d13af4ca4c","kind":"observation","label":"shattered.io · 2026-10-08 · Bitget Hack Hits $388M, Skips Private Keys Entirely [2026]","url":"https://shattered.io/bitget-hack-388-million-zero-day-2026/"},{"id":"sb:o/7329e0a9ef6844834c72546e","kind":"observation","label":"Krebs on Security · 2026-10-07 · ShinyHunters Extorted Boeing Spin-off Prior to Arrests","url":"https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/"},{"id":"sb:o/78bf884a3422fb4fb233362a","kind":"observation","label":"BleepingComputer · 2026-10-06 · New Dell System Update flaw lets hackers gain root privileges","url":"https://www.bleepingcomputer.com/news/security/new-dell-system-update-flaw-lets-hackers-gain-root-privileges/"},{"id":"sb:o/649b066dfc37043f57a6a375","kind":"observation","label":"24/7 Wall St. · 2026-10-05 · The Biggest Buyers in Cybersecurity Now Are Not Cybersecurity Companies","url":"https://247wallst.com/investing/2026/10/05/the-biggest-buyers-in-cybersecurity-now-are-not-cybersecurity-companies/"},{"id":"sb:o/b8f649d9c19494244aa1a7f0","kind":"observation","label":"Help Net Security · 2026-10-04 · Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited","url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/"},{"id":"sb:o/290a973b1f76f0367fdb4c16","kind":"observation","label":"BleepingComputer · 2026-10-03 · Dell asks admins to patch max severity CSM flaws as soon as possible","url":"https://www.bleepingcomputer.com/news/security/new-max-severity-dell-csm-flaws-give-hackers-admin-privileges/"},{"id":"sb:o/744cf24cdde8589e6cb51d19","kind":"observation","label":"crypto.news · 2026-10-03 · Chainalysis AI traces $387M Bitget hack in under 10 minutes","url":"https://crypto.news/chainalysis-ai-traces-bitget-hack-in-10-minutes/"}],"cursor":"c1.eyJpZCI6InNiOmUvODQ2M2ViOWI3MzE0YzM4ZmMxMzE0MTU1IiwibCI6ImNoaWxkcmVuIiwibyI6MTAsImsiOm51bGwsImEiOiIyMDI2LTEwLTA5VDEzOjE4OjIyLjYyODY5NCswMDowMCJ9","order":"newest first; we keep the 12 newest receipts for this entity. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":{"state":"cannot-measure","reason":"claims: this subject's maintained record could not be read (the maintained record \"mandiant\" could not measure its claims: this subject was retired from the publication registry on 2026-10-04 (no longer clears the admission conditions — re-checked 2026-10-04 (no receipt in the corpus-evidence shard for this label)); the record is kept as a dated tombstone and is no longer maintained). The items listed come from the passes that could be read"},"byKind":{"co-mentioned":10},"items":[{"kind":"relation","label":"co-mentioned with crypto (72 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/cecafdbc95533ac463cdcbb5"},{"kind":"relation","label":"co-mentioned with bitget (70 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/8d959cc9d054df1eeace7e93"},{"kind":"relation","label":"co-mentioned with ethereum (67 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/3218fd5ec8f6c03f210d79f0"},{"kind":"relation","label":"co-mentioned with slowmist (67 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/3125d2b48bfe9266739ae020"},{"kind":"relation","label":"co-mentioned with usdt (57 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/858b8a57f3dd072acf257646"},{"kind":"relation","label":"co-mentioned with bitcoin (55 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/d8ce94b026ed2d8eb8a94693"},{"kind":"relation","label":"co-mentioned with chen (52 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/1fad16808def0c4aaeda0c5d"},{"kind":"relation","label":"co-mentioned with gracy chen (52 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/b65e60f2d3d803fd53764307"},{"kind":"relation","label":"co-mentioned with tron (49 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/0442b7d84c08ffda2b4d6ba4"},{"kind":"relation","label":"co-mentioned with zcash (47 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/19f7fb3bb6cbf44eee20d715"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/8463eb9b7314c38fc1314155","mcp":"traverse {\"id\":\"sb:e/8463eb9b7314c38fc1314155\"}","page":"/entity/mandiant/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/8463eb9b7314c38fc1314155\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/8463eb9b7314c38fc1314155\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/8463eb9b7314c38fc1314155\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/8463eb9b7314c38fc1314155\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}