{"schema":"sb.node.v1","id":"sb:e/c9d8eb4350b2e4b7b97f5e8b","kind":"entity","label":{"text":"microsoft defender","locale":"en"},"identity":{"anchor":"label:en:microsoft defender","strength":"label"},"asOf":{"knowledgeCutoff":"2026-10-08T20:34:57.810068+00:00","snapshot":"deploy 04403dd1b6ff6ffe00b03195c3da75dd204003f6"},"lens":{"kind":"public"},"build":{"plane":"projected","builtFrom":["entity_graph.slim.json","entity_receipts (deploy asset)","event_graph.json","truth_records (deploy asset)","corroborated_record.json"],"rule":"node-projection.entity@v1"},"standing":{"evidence":{"supporting":30,"separatePublishers":14,"basis":"documents that mention the subject and the outlets that carried them; a mention is evidence the referent is in use, not evidence about any claim"},"admission":{"state":"canonical","reason":"entity graph provenance 'curated'; the node carries no promotion receipt in v1","policy":"EQ-PROMOTION (receipt not carried)"},"disposition":{"state":"served","reason":"public record"},"validity":{"from":"2026-09-03","to":"2026-10-07","basis":"first and last day we saw it mentioned; not the subject's own lifetime"},"measurement":{"state":"partial","blind":["assertion coverage 0.2: about 80% of mentions carry no typed assertion"]}},"dimensions":{"domains":["cybersecurity","auto"],"activeDays":17,"assertions":{"launch-release":4,"military-action":1,"acquisition":1}},"up":[],"upNote":"An entity is a root: it is contained by nothing. Pan out by following R.","children":{"count":12,"byKind":{"observation":12},"items":[{"id":"sb:o/68711720a0cda4e414c9379a","kind":"observation","label":"The Hacker News · 2026-09-23 · Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates","url":"https://thehackernews.com/2026/09/researcher-drops-bigdiskbuster-zero-day.html"},{"id":"sb:o/ab64460f10f245626d387ed4","kind":"observation","label":"The Register · 2026-09-22 · NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past","url":"https://www.theregister.com/security/2026/09/22/nightmareeclipses-latest-zero-day-leaves-microsoft-defender-stuck-in-the-past/5298320"},{"id":"sb:o/94088ba66a6001400ed8e1d7","kind":"observation","label":"BleepingComputer · 2026-09-03 · Microsoft Defender flags legitimate Google search links as malicious","url":"https://www.bleepingcomputer.com/news/security/microsoft-defender-flags-legitimate-google-search-links-as-malicious/"},{"id":"sb:o/bd96bf472e57069f0871ebf5","kind":"observation","label":"The Hacker News · 2026-10-07 · 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer","url":"https://thehackernews.com/2026/10/100-compromised-websites-use-fake.html"},{"id":"sb:o/590db396690f0be2a95c599e","kind":"observation","label":"PR Newswire · 2026-10-05 · Breaker Launches Newsletter MCP + API for AI Workflows and RealClick™ for Verified Metrics","url":"https://www.prnewswire.com/news-releases/breaker-launches-newsletter-mcp--api-for-ai-workflows-and-realclick-for-verified-metrics-302897734.html"},{"id":"sb:o/8d6eaab4abc599ade16adc8a","kind":"observation","label":"Defense Security Monitor · 2026-10-02 · Cybersecurity Is a Dance, Not a Fortress: AI for Cyber in U.S. National Security","url":"https://dsm.forecastinternational.com/2026/10/01/cybersecurity-is-a-dance-not-a-fortress-ai-for-cyber-in-u-s-national-security/?utm_source=rss&utm_medium=rss&utm_campaign=cybersecurity-is-a-dance-not-a-fortress-ai-for-cyber-in-u-s-national-security&utm_source=rss&utm_medium=rss&utm_campaign=cybersecurity-is-a-dance-not-a-fortress-ai-for-cyber-in-u-s-national-security"},{"id":"sb:o/5fc9642efccef903ab274b40","kind":"observation","label":"Federal News Network · 2026-10-01 · Why AI is making social engineering harder to spot","url":"https://federalnewsnetwork.com/commentary/2026/10/why-ai-is-making-social-engineering-harder-to-spot/"},{"id":"sb:o/06baf2052107a69c908da364","kind":"observation","label":"The Hacker News · 2026-10-01 · Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures","url":"https://thehackernews.com/2026/09/attackers-abuse-chatgpt-custom-gpts-to.html"},{"id":"sb:o/65290b68547fbe32e24f310b","kind":"observation","label":"The Hacker News · 2026-09-30 · Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor","url":"https://thehackernews.com/2026/09/russias-star-blizzard-targets-100.html"},{"id":"sb:o/525e8a3cb1e215998407f672","kind":"observation","label":"The Hacker News · 2026-09-29 · Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks","url":"https://thehackernews.com/2026/09/hackers-use-needymantis-to-maintain.html"}],"cursor":"c1.eyJpZCI6InNiOmUvYzlkOGViNDM1MGIyZTRiN2I5N2Y1ZThiIiwibCI6ImNoaWxkcmVuIiwibyI6MTAsImsiOm51bGwsImEiOiIyMDI2LTEwLTA4VDIwOjM0OjU3LjgxMDA2OCswMDowMCJ9","order":"newest first; we keep the 12 newest receipts for this entity. Its other observations are counted in standing.evidence.supporting but are not addressable in v1"},"relations":{"count":6,"byKind":{"co-mentioned":6},"items":[{"kind":"relation","label":"co-mentioned with microsoft (30 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/28c01948cdd129f6def64c8b"},{"kind":"relation","label":"co-mentioned with ai (20 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/1a0b7fdfda19b83c3b4b5d66"},{"kind":"relation","label":"co-mentioned with google (10 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/4fde14ccbd196cd5646eedb5"},{"kind":"relation","label":"co-mentioned with powershell (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/9c679284ec9c76786e5abd08"},{"kind":"relation","label":"co-mentioned with china (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/8d702ab8f977e59c4a7a8f57"},{"kind":"relation","label":"co-mentioned with russia (8 documents)","role":"co-mentioned","relationKind":"co-mentioned","members":2,"id":"sb:r/96087ea1dd65992ec017e09a"}],"cursor":null,"order":"situations first, then claims (the subject's own maintained record, then site-wide corroborated clusters; each label ends with its standing), then co-mentions by shared documents, descending. Co-mentions are the ten strongest the entity graph keeps per entity"},"edge":{"state":"continues"},"links":{"rest":"/api/v1/node/e/c9d8eb4350b2e4b7b97f5e8b","mcp":"traverse {\"id\":\"sb:e/c9d8eb4350b2e4b7b97f5e8b\"}","page":"/entity/microsoft-defender/"},"limits":{"levelsPerCall":1,"pageSize":10,"maxPageSize":50,"membersMax":50,"statement":"One level per call: depth is 1 and only 1, and there is no whole-graph dump. pageSize 1-50 (default 10); a page limit is a cursor, never an edge. Members are listed up to 50. At most 60 traverse calls a minute per caller (runaway-loop protection, not a meter). One knowledge cutoff is served: the deploy's."},"actions":[{"verb":"unfold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/c9d8eb4350b2e4b7b97f5e8b\",\"level\":\"children\"}"},{"verb":"fold","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/c9d8eb4350b2e4b7b97f5e8b\"}"},{"verb":"panOut","lit":false,"effect":"read","layer":"cantina","reason":"An entity is a root: it is contained by nothing. Pan out by following R."},{"verb":"follow","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/c9d8eb4350b2e4b7b97f5e8b\",\"level\":\"relations\"}"},{"verb":"receipts","lit":false,"effect":"read","layer":"cantina","reason":"receipts are the observations below this node; unfold to reach them"},{"verb":"edge","lit":true,"effect":"read","layer":"cantina","call":"traverse {\"id\":\"sb:e/c9d8eb4350b2e4b7b97f5e8b\"}"},{"verb":"asOf","lit":false,"effect":"read","layer":"cantina","reason":"v1 serves one knowledge cutoff, this deploy's; walking an earlier cutoff needs retained history (EQ-REPLAY), which v1 does not keep"},{"verb":"switchObserver","lit":false,"effect":"read","layer":"cantina","reason":"the public record is the same for every observer; traversal through a Watch's lens is not served in v1"},{"verb":"readOriginal","lit":false,"effect":"read","layer":"cantina","reason":"no translation is applied on this node; every label is the source's own text"},{"verb":"save","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"saving applies to a configured Watch; configure one around this node first (free), then save it"},{"verb":"deliver","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"delivery applies to a saved Watch"},{"verb":"format","lit":false,"effect":"watch-declaration","layer":"workshop","reason":"output format applies to a saved Watch"},{"verb":"deltaR","lit":false,"effect":"read","layer":"workshop","reason":"Delta R needs a saved Watch with a previous reading"},{"verb":"read","lit":false,"effect":"read","layer":"docking-bay","reason":"one-time Reads are parked until the Commander decides their shape (#938)"}]}