{
  "type": "bundle",
  "id": "bundle--3b6e4d42-7334-49b8-9b64-9cb29b94d710",
  "objects": [
    {
      "type": "marking-definition",
      "spec_version": "2.1",
      "id": "marking-definition--bda622a4-003f-48dc-9fcb-ccc9c709f0d7",
      "created": "2026-08-25T00:00:00.000Z",
      "definition_type": "statement",
      "definition": { "statement": "INERT CODERSSECRET TRAINING DATA. NOT A LIVE INDICATOR. DO NOT IMPORT INTO PRODUCTION BLOCKING SYSTEMS." }
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--98a5af5d-152a-47e5-a40c-a5e0429cf0a7",
      "created": "2026-08-25T00:00:00.000Z",
      "modified": "2026-08-25T00:00:00.000Z",
      "name": "CodersSecret Fictional Course Producer",
      "identity_class": "organization",
      "description": "Instructor-authored fictional identity for defensive training only.",
      "object_marking_refs": ["marking-definition--bda622a4-003f-48dc-9fcb-ccc9c709f0d7"]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--cd8fc8de-094e-4c2c-99f9-8d7b9e4207a1",
      "created_by_ref": "identity--98a5af5d-152a-47e5-a40c-a5e0429cf0a7",
      "created": "2026-08-25T09:20:00.000Z",
      "modified": "2026-08-25T09:20:00.000Z",
      "name": "Northstar toy update-domain review marker",
      "description": "Matches a reserved .invalid course value. It is useful only inside the supplied synthetic scenario and does not imply malicious intent.",
      "indicator_types": ["unknown"],
      "pattern_type": "stix",
      "pattern_version": "2.1",
      "pattern": "[domain-name:value = 'updates.northstar.invalid']",
      "valid_from": "2026-08-25T09:20:00.000Z",
      "confidence": 10,
      "object_marking_refs": ["marking-definition--bda622a4-003f-48dc-9fcb-ccc9c709f0d7"]
    },
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--620633cb-6d1d-4c63-9687-b0d06ac436b6",
      "created_by_ref": "identity--98a5af5d-152a-47e5-a40c-a5e0429cf0a7",
      "created": "2026-08-25T09:30:00.000Z",
      "modified": "2026-08-25T09:30:00.000Z",
      "name": "Northstar fictional release-integrity review",
      "description": "Toy report with no attribution claim. Core STIX conformance is separate from FIRST TLP 2.0 handling metadata.",
      "report_types": ["threat-report"],
      "published": "2026-08-25T09:30:00.000Z",
      "object_refs": ["indicator--cd8fc8de-094e-4c2c-99f9-8d7b9e4207a1"],
      "object_marking_refs": ["marking-definition--bda622a4-003f-48dc-9fcb-ccc9c709f0d7"]
    }
  ]
}
