From aa00bd384c001459e8242e6a895b86a2b895a63f Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Tue, 11 Jan 2022 09:43:03 +0100 Subject: [PATCH 1/8] Add MAP application context list, without version --- objects/ss7-attack/definition.json | 63 +++++++++++++++++++++++++++++- 1 file changed, 62 insertions(+), 1 deletion(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index fc9be03..95756d4 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -46,6 +46,67 @@ "description": "MAP application context in OID format.", "disable_correlation": true, "misp-attribute": "text", + "sane_default": [ + "4.0.0.1.0.1. - networkLocUp ", + "4.0.0.1.0.2. - locationCancel ", + "4.0.0.1.0.3. - roamingNbEnquiry ", + "4.0.0.1.0.22. - subscriberDataModificationNotification ", + "4.0.0.1.0.6. - callControlTransfer ", + "4.0.0.1.0.16. - subscriberDataMngt ", + "4.0.0.1.0.32. - gprsLocationUpdate ", + "4.0.0.1.0.46. - vcsgLocationUpdate ", + "4.0.0.1.0.1. - networkLocUp_v1 ", + "4.0.0.1.0.14. - infoRetrieval_v1 ", + "4.0.0.1.0.15. - interVlrInfoRetrieval_v1 ", + "4.0.0.1.0.18. - networkFunctionalSs ", + "4.0.0.1.0.39. - authenticationFailureReport_v3 ", + "4.0.0.1.0.18. - networkFunctionalSs_v1 ", + "4.0.0.1.0.44. - resourceMngt ", + "4.0.0.1.0.41. - shortMsgMT_VGCS_Relay ", + "4.0.0.1.0.5. - locInfoRetrieval ", + "4.0.0.1.0.32. - gprsLocationUpdate_v3 ", + "4.0.0.1.0.33. - gprsLocationInfoRetrieval_v3_v4 ", + "4.0.0.1.0.34. - failureReport_v3 ", + "4.0.0.1.0.35. - gprsNotify ", + "4.0.0.1.0.11. - handoverControl_v1 ", + "4.0.0.1.0.11. - handoverControl ", + "4.0.0.1.0.12. - sIWFSAllocation ", + "4.0.0.1.0.47. - vcsgLocationCancel ", + "4.0.0.1.0.10. - reset ", + "4.0.0.1.0.31. - groupCallControl ", + "4.0.0.1.0.13. - equipmentMngt ", + "4.0.0.1.0.25. - shortMsgMT_Relay ", + "4.0.0.1.0.20. - shortMsgGateway ", + "4.0.0.1.0.21. - shortMsgMO_Relay ", + "4.0.0.1.0.24. - mwdMngt_v1 ", + "4.0.0.1.0.23. - shortMsgAlert_v1 ", + "4.0.0.1.0.17. - tracing ", + "4.0.0.1.0.18. - networkFunctionalSs_V1 ", + "4.0.0.1.0.15. - interVlrInfoRetrievalV2_V3 ", + "4.0.0.1.0.14. - infoRetrieval_v2_v3 ", + "4.0.0.1.0.1. - networkLocUp_v2 ", + "4.0.0.1.0.26. - imsiRetrieval_v2 ", + "4.0.0.1.0.19. - networkUnstructuredSsv2 ", + "4.0.0.1.0.19. - networkUnstructuredSs ", + "4.0.0.1.0.43. - anyTimeInfoHandling ", + "4.0.0.1.0.23. - shortMsgAlert_v2 ", + "4.0.0.1.0.24. - mwdMngt_v2_v3 ", + "4.0.0.1.0.4. - istAlerting_v2_v3 ", + "4.0.0.1.0.27. - msPurging_v3 ", + "4.0.0.1.0.11. - handoverControl_v2_v3 ", + "4.0.0.1.0.28. - subscriberInfoEnquiry ", + "4.0.0.1.0.29. - anyTimeEnquiryv3 ", + "4.0.0.1.0.36. - ss_InvocationNotification ", + "4.0.0.1.0.7. - reporting ", + "4.0.0.1.0.8. - callCompletion ", + "4.0.0.1.0.38. - locationSvcEnquiryv3 ", + "4.0.0.1.0.45. - groupCallInfoRetrieval ", + "4.0.0.1.0.37. - locationSvcGateway_v3 ", + "4.0.0.1.0.38. - locationSvcEnquiry ", + "4.0.0.1.0.4. - istAlerting_v3 ", + "4.0.0.1.0.9. - ServiceTermination ", + "4.0.0.1.0.42. - mm_EventReporting " + ], "ui-priority": 0 }, "MapGmlc": { @@ -198,4 +259,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 3 -} \ No newline at end of file +} From e7622d92b38d1b26a30aeef55e4c1af8ae3621d8 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Tue, 11 Jan 2022 09:49:30 +0100 Subject: [PATCH 2/8] Add list of MAP Opcodes (text + number) --- objects/ss7-attack/definition.json | 83 ++++++++++++++++++++++++++++++ 1 file changed, 83 insertions(+) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index 95756d4..a2f43cd 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -140,6 +140,89 @@ "description": "MAP operation codes - Decimal value between 0-99.", "disable_correlation": true, "misp-attribute": "text", + "sane_default": [ + "updateLocation - 2", + "cancelLocation - 3", + "provideRoamingNumber - 4", + "noteSubscriberDataModified - 5", + "resumeCallHandling - 6", + "insertSubscriberData - 7", + "deleteSubscriberData - 8", + "sendParameters - 9", + "registerSS - 10", + "eraseSS - 11", + "activateSS - 12", + "deactivateSS - 13", + "interrogateSS - 14", + "authenticationFailureReport - 15", + "registerPassword - 17", + "getPassword - 18", + "processUnstructuredSS_Data - 19", + "releaseResources - 20", + "mt_ForwardSM_VGCS - 21", + "sendRoutingInfo - 22", + "updateGprsLocation - 23", + "sendRoutingInfoForGprs - 24", + "failureReport - 25", + "noteMsPresentForGprs - 26", + "performHandover - 28", + "sendEndSignal - 29", + "performSubsequentHandover - 30", + "provideSIWFSNumber - 31", + "siwfs_SignallingModify - 32", + "processAccessSignalling - 33", + "forwardAccessSignalling - 34", + "noteInternalHandover - 35", + "cancelVcsgLocation - 36", + "reset_ - 37", + "forwardCheckSsIndication - 38", + "prepareGroupCall - 39", + "sendGroupCallEndSignal - 40", + "processGroupCallSignalling - 41", + "forwardGroupCallSignalling - 42", + "checkIMEI - 43", + "mt_forwardSM - 44", + "sendRoutingInfoForSM - 45", + "mo_forwardSM - 46", + "reportSmDeliveryStatus - 47", + "noteSubscriberPresent - 48", + "alertServiceCentreWithoutResult - 49", + "activateTraceMode - 50", + "deactivateTraceMode - 51", + "traceSubscriberActivity - 52", + "updateVcsgLocation - 53", + "beginSubscriberActivity - 54", + "sendIdentification - 55", + "sendAuthenticationInfo - 56", + "restoreData - 57", + "sendIMSI - 58", + "processUnstructuredSS_Request - 59", + "unstructuredSS_Request - 60", + "unstructuredSS_Notify - 61", + "anyTimeSubscriptionInterrogation - 62", + "informServiceCentre - 63", + "alertServiceCentre - 64", + "anyTimeModification - 65", + "readyForSM - 66", + "purgeMS - 67", + "prepareHandover - 68", + "prepareSubsequentHandover - 69", + "provideSubscriberInfo - 70", + "anyTimeInterrogation - 71", + "ss_Invocation_Notification - 72", + "setReportingState - 73", + "statusReport - 74", + "remoteUserFree - 75", + "registerCC_Entry - 76", + "eraseCC_Entry - 77", + "provideSubscriberLocation - 83", + "sendGroupCallInfo - 84", + "sendRoutingInfoForLCS - 85", + "subscriberLocationReport - 86", + "istAlert - 87", + "istCommand - 88", + "NoteMM_Event - 89" + ], "ui-priority": 0 }, "MapSmsTP-DCS": { From 41d52f67b98bd2aa68c1a0a7803f358994e97c9f Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Wed, 19 Jan 2022 18:05:40 +0100 Subject: [PATCH 3/8] Cleanup ApplicationContext List + Removed versions Versions are managed via the MAP Version field --- objects/ss7-attack/definition.json | 105 +++++++++++++---------------- 1 file changed, 46 insertions(+), 59 deletions(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index a2f43cd..8ada671 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -47,65 +47,52 @@ "disable_correlation": true, "misp-attribute": "text", "sane_default": [ - "4.0.0.1.0.1. - networkLocUp ", - "4.0.0.1.0.2. - locationCancel ", - "4.0.0.1.0.3. - roamingNbEnquiry ", - "4.0.0.1.0.22. - subscriberDataModificationNotification ", - "4.0.0.1.0.6. - callControlTransfer ", - "4.0.0.1.0.16. - subscriberDataMngt ", - "4.0.0.1.0.32. - gprsLocationUpdate ", - "4.0.0.1.0.46. - vcsgLocationUpdate ", - "4.0.0.1.0.1. - networkLocUp_v1 ", - "4.0.0.1.0.14. - infoRetrieval_v1 ", - "4.0.0.1.0.15. - interVlrInfoRetrieval_v1 ", - "4.0.0.1.0.18. - networkFunctionalSs ", - "4.0.0.1.0.39. - authenticationFailureReport_v3 ", - "4.0.0.1.0.18. - networkFunctionalSs_v1 ", - "4.0.0.1.0.44. - resourceMngt ", - "4.0.0.1.0.41. - shortMsgMT_VGCS_Relay ", - "4.0.0.1.0.5. - locInfoRetrieval ", - "4.0.0.1.0.32. - gprsLocationUpdate_v3 ", - "4.0.0.1.0.33. - gprsLocationInfoRetrieval_v3_v4 ", - "4.0.0.1.0.34. - failureReport_v3 ", - "4.0.0.1.0.35. - gprsNotify ", - "4.0.0.1.0.11. - handoverControl_v1 ", - "4.0.0.1.0.11. - handoverControl ", - "4.0.0.1.0.12. - sIWFSAllocation ", - "4.0.0.1.0.47. - vcsgLocationCancel ", - "4.0.0.1.0.10. - reset ", - "4.0.0.1.0.31. - groupCallControl ", - "4.0.0.1.0.13. - equipmentMngt ", - "4.0.0.1.0.25. - shortMsgMT_Relay ", - "4.0.0.1.0.20. - shortMsgGateway ", - "4.0.0.1.0.21. - shortMsgMO_Relay ", - "4.0.0.1.0.24. - mwdMngt_v1 ", - "4.0.0.1.0.23. - shortMsgAlert_v1 ", - "4.0.0.1.0.17. - tracing ", - "4.0.0.1.0.18. - networkFunctionalSs_V1 ", - "4.0.0.1.0.15. - interVlrInfoRetrievalV2_V3 ", - "4.0.0.1.0.14. - infoRetrieval_v2_v3 ", - "4.0.0.1.0.1. - networkLocUp_v2 ", - "4.0.0.1.0.26. - imsiRetrieval_v2 ", - "4.0.0.1.0.19. - networkUnstructuredSsv2 ", - "4.0.0.1.0.19. - networkUnstructuredSs ", - "4.0.0.1.0.43. - anyTimeInfoHandling ", - "4.0.0.1.0.23. - shortMsgAlert_v2 ", - "4.0.0.1.0.24. - mwdMngt_v2_v3 ", - "4.0.0.1.0.4. - istAlerting_v2_v3 ", - "4.0.0.1.0.27. - msPurging_v3 ", - "4.0.0.1.0.11. - handoverControl_v2_v3 ", - "4.0.0.1.0.28. - subscriberInfoEnquiry ", - "4.0.0.1.0.29. - anyTimeEnquiryv3 ", - "4.0.0.1.0.36. - ss_InvocationNotification ", - "4.0.0.1.0.7. - reporting ", - "4.0.0.1.0.8. - callCompletion ", - "4.0.0.1.0.38. - locationSvcEnquiryv3 ", - "4.0.0.1.0.45. - groupCallInfoRetrieval ", - "4.0.0.1.0.37. - locationSvcGateway_v3 ", - "4.0.0.1.0.38. - locationSvcEnquiry ", - "4.0.0.1.0.4. - istAlerting_v3 ", - "4.0.0.1.0.9. - ServiceTermination ", - "4.0.0.1.0.42. - mm_EventReporting " + "4.0.0.1.0.1. - networkLocUp", + "4.0.0.1.0.2. - locationCancel", + "4.0.0.1.0.3. - roamingNbEnquiry", + "4.0.0.1.0.22. - subscriberDataModificationNotification", + "4.0.0.1.0.6. - callControlTransfer", + "4.0.0.1.0.16. - subscriberDataMngt", + "4.0.0.1.0.32. - gprsLocationUpdate", + "4.0.0.1.0.46. - vcsgLocationUpdate", + "4.0.0.1.0.15. - interVlrInfoRetrieval", + "4.0.0.1.0.18. - networkFunctionalSs", + "4.0.0.1.0.39. - authenticationFailureReport", + "4.0.0.1.0.44. - resourceMngt", + "4.0.0.1.0.41. - shortMsgMT_VGCS_Relay", + "4.0.0.1.0.5. - locInfoRetrieval", + "4.0.0.1.0.32. - gprsLocationUpdate", + "4.0.0.1.0.33. - gprsLocationInfoRetrieval", + "4.0.0.1.0.34. - failureReport", + "4.0.0.1.0.35. - gprsNotify", + "4.0.0.1.0.11. - handoverControl", + "4.0.0.1.0.12. - sIWFSAllocation", + "4.0.0.1.0.47. - vcsgLocationCancel", + "4.0.0.1.0.10. - reset", + "4.0.0.1.0.31. - groupCallControl", + "4.0.0.1.0.13. - equipmentMngt", + "4.0.0.1.0.25. - shortMsgMT_Relay", + "4.0.0.1.0.20. - shortMsgGateway", + "4.0.0.1.0.21. - shortMsgMO_Relay", + "4.0.0.1.0.24. - mwdMngt", + "4.0.0.1.0.23. - shortMsgAlert", + "4.0.0.1.0.17. - tracing", + "4.0.0.1.0.14. - infoRetrieval", + "4.0.0.1.0.26. - imsiRetrieval", + "4.0.0.1.0.19. - networkUnstructuredSs", + "4.0.0.1.0.43. - anyTimeInfoHandling", + "4.0.0.1.0.4. - istAlerting", + "4.0.0.1.0.27. - msPurging", + "4.0.0.1.0.28. - subscriberInfoEnquiry", + "4.0.0.1.0.29. - anyTimeEnquiry", + "4.0.0.1.0.36. - ss_InvocationNotification", + "4.0.0.1.0.7. - reporting", + "4.0.0.1.0.8. - callCompletion", + "4.0.0.1.0.38. - locationSvcEnquiry", + "4.0.0.1.0.45. - groupCallInfoRetrieval", + "4.0.0.1.0.37. - locationSvcGateway", + "4.0.0.1.0.9. - ServiceTermination", + "4.0.0.1.0.42. - mm_EventReporting" ], "ui-priority": 0 }, From f1fea67b5886f4f4f8d14b7ea9f3116de5bfc2e9 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Tue, 1 Feb 2022 17:26:22 +0100 Subject: [PATCH 4/8] Add FowardSM for "old" SMS --- objects/ss7-attack/definition.json | 1 + 1 file changed, 1 insertion(+) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index 8ada671..a2b4bd0 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -171,6 +171,7 @@ "mt_forwardSM - 44", "sendRoutingInfoForSM - 45", "mo_forwardSM - 46", + "forwardSM - 46", "reportSmDeliveryStatus - 47", "noteSubscriberPresent - 48", "alertServiceCentreWithoutResult - 49", From 30949fbeb56ec47490b85b56cca839a3d91aa7b6 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Thu, 3 Feb 2022 10:09:05 +0100 Subject: [PATCH 5/8] Update descriptions for SS7, Diameter & GTP objects --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index c80d2ba..84a820e 100644 --- a/README.md +++ b/README.md @@ -146,7 +146,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID - [objects/dark-pattern-item](https://github.com/MISP/misp-objects/blob/main/objects/dark-pattern-item/definition.json) - An Item whose User Interface implements a dark pattern. - [objects/ddos](https://github.com/MISP/misp-objects/blob/main/objects/ddos/definition.json) - DDoS object describes a current DDoS activity from a specific or/and to a specific target. Type of DDoS can be attached to the object as a taxonomy. - [objects/device](https://github.com/MISP/misp-objects/blob/main/objects/device/definition.json) - An object to define a device. -- [objects/diameter-attack](https://github.com/MISP/misp-objects/blob/main/objects/diameter-attack/definition.json) - Attack as seen on diameter authentication against a GSM, UMTS or LTE network. +- [objects/diameter-attack](https://github.com/MISP/misp-objects/blob/main/objects/diameter-attack/definition.json) - Attack as seen on the diameter signaling protocol supporting LTE networks. - [objects/dkim](https://github.com/MISP/misp-objects/blob/main/objects/dkim/definition.json) - DomainKeys Identified Mail - DKIM. - [objects/dns-record](https://github.com/MISP/misp-objects/blob/main/objects/dns-record/definition.json) - A set of DNS records observed for a specific domain. - [objects/domain-crawled](https://github.com/MISP/misp-objects/blob/main/objects/domain-crawled/definition.json) - A domain crawled over time. @@ -224,7 +224,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID - [objects/git-vuln-finder](https://github.com/MISP/misp-objects/blob/main/objects/git-vuln-finder/definition.json) - Export from git-vuln-finder. - [objects/github-user](https://github.com/MISP/misp-objects/blob/main/objects/github-user/definition.json) - GitHub user. - [objects/gitlab-user](https://github.com/MISP/misp-objects/blob/main/objects/gitlab-user/definition.json) - GitLab user. Gitlab.com user or self-hosted GitLab instance. -- [objects/gtp-attack](https://github.com/MISP/misp-objects/blob/main/objects/gtp-attack/definition.json) - GTP attack object as seen on a GSM, UMTS or LTE network. +- [objects/gtp-attack](https://github.com/MISP/misp-objects/blob/main/objects/gtp-attack/definition.json) - GTP attack object as attack as seen on the GTP signaling protocol supporting GPRS/LTE networks. - [objects/hashlookup](https://github.com/MISP/misp-objects/blob/main/objects/hashlookup/definition.json) - hashlookup object as described on hashlookup services from circl.lu - https://www.circl.lu/services/hashlookup. - [objects/http-request](https://github.com/MISP/misp-objects/blob/main/objects/http-request/definition.json) - A single HTTP request header. - [objects/ilr-impact](https://github.com/MISP/misp-objects/blob/main/objects/ilr-impact/definition.json) - Institut Luxembourgeois de Regulation - Impact. @@ -331,7 +331,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID - [objects/shortened-link](https://github.com/MISP/misp-objects/blob/main/objects/shortened-link/definition.json) - Shortened link and its redirect target. - [objects/social-media-group](https://github.com/MISP/misp-objects/blob/main/objects/social-media-group/definition.json) - Social media group object template describing a public or private group or channel. - [objects/splunk](https://github.com/MISP/misp-objects/blob/main/objects/splunk/definition.json) - Splunk / Splunk ES object. -- [objects/ss7-attack](https://github.com/MISP/misp-objects/blob/main/objects/ss7-attack/definition.json) - SS7 object of an attack seen on a GSM, UMTS or LTE network via SS7 logging. +- [objects/ss7-attack](https://github.com/MISP/misp-objects/blob/main/objects/ss7-attack/definition.json) - SS7 object of an attack as seen on the SS7 signaling protocol supporting GSM/GPRS/UMTS networks. - [objects/ssh-authorized-keys](https://github.com/MISP/misp-objects/blob/main/objects/ssh-authorized-keys/definition.json) - An object to store ssh authorized keys file. - [objects/stix2-pattern](https://github.com/MISP/misp-objects/blob/main/objects/stix2-pattern/definition.json) - An object describing a STIX pattern. The object can be linked via a relationship to other attributes or objects to describe how it can be represented as a STIX pattern. - [objects/submarine](https://github.com/MISP/misp-objects/blob/main/objects/submarine/definition.json) - Submarine description. From df81204b24db106b9c032c9164de3ee347b9dc88 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Thu, 3 Feb 2022 10:42:35 +0100 Subject: [PATCH 6/8] Modification avec the jq_all_the_things.sh --- objects/ss7-attack/definition.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index a2b4bd0..c9c14ac 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -46,7 +46,7 @@ "description": "MAP application context in OID format.", "disable_correlation": true, "misp-attribute": "text", - "sane_default": [ + "sane_default": [ "4.0.0.1.0.1. - networkLocUp", "4.0.0.1.0.2. - locationCancel", "4.0.0.1.0.3. - roamingNbEnquiry", @@ -330,4 +330,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 3 -} +} \ No newline at end of file From c5d084b93063b1114ff38440ee4a1910ad008ec9 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Thu, 3 Feb 2022 12:54:09 +0100 Subject: [PATCH 7/8] Remove a duplicated gprsLocationUpdate --- objects/ss7-attack/definition.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index c9c14ac..c7d4a0e 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -53,7 +53,6 @@ "4.0.0.1.0.22. - subscriberDataModificationNotification", "4.0.0.1.0.6. - callControlTransfer", "4.0.0.1.0.16. - subscriberDataMngt", - "4.0.0.1.0.32. - gprsLocationUpdate", "4.0.0.1.0.46. - vcsgLocationUpdate", "4.0.0.1.0.15. - interVlrInfoRetrieval", "4.0.0.1.0.18. - networkFunctionalSs", @@ -330,4 +329,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 3 -} \ No newline at end of file +} From 6859121d166a5ddb7bdbb75e96a026113ba22033 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Thu, 3 Feb 2022 12:58:56 +0100 Subject: [PATCH 8/8] Modification after running ./jq_all_the_things.sh --- objects/ss7-attack/definition.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index c7d4a0e..2bad2c8 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -329,4 +329,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 3 -} +} \ No newline at end of file