Relation

rel_329

relationversion 2 · current

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

The claim

MITRE ATT&CK Enterpriserecords thatLeviathanusesgh0st RAT
fetch —sha256 81113ba98afa2928
rel_329btcintel:relations:329@v2 sha256:c0a9e20f5c614bc6
confidenceauthority data · 60

Versions

version	created	actor	content sha256	citation
v1	2026-09-22 14:42 UTC	importer:mitre-attack	e6fa7ebd0ce07a0035c9f536c7851cfc5a95a337da52f51a50e74f4c16e02ad6	btcintel:relations:329@v1 sha256:e6fa7ebd0ce07a00
v2current	2026-10-20 16:03 UTC	importer:mitre-attack	c0a9e20f5c614bc692b68ffdd93f185fb8bac16317767dcf16dc18192cf7c138	btcintel:relations:329@v2 sha256:c0a9e20f5c614bc6

Verify

A citation names a claim id, a version and the first 16 hex of the content hash of that version. Fetch the version and compare: the hash must start with the citation's 16 hex, and the ETag of the answer is the same hash.

curl -sI "https://api.btcintel.io/v1/claims/rel_329?version=2" | grep -i etag
# ETag: "c0a9e20f5c614bc692b68ffdd93f185fb8bac16317767dcf16dc18192cf7c138"

curl -s "https://api.btcintel.io/v1/claims/rel_329?version=2" | jq -r .content_sha256
# c0a9e20f5c614bc692b68ffdd93f185fb8bac16317767dcf16dc18192cf7c138
# the first 16 hex are the citation's: btcintel:relations:329@v2 sha256:c0a9e20f5c614bc6

Every change to the content writes a new version with its own hash; the previous version keeps its hash and its citation, so a quote never changes under the reader.

Dispute

A dispute names the claim id and a reason; it is recorded under your npub, counted on the claim, and ops resolve it next to the claim with a reason and a date.

Community

Community notes about this claim's subject

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.