graph G {
    compound="true"
    rankdir="TB"
    bgcolor="white"
    fontname="Tahoma"

    node [
        fixedsize="false"
        fontname="Tahoma"
        color="white"
        fillcolor="deepskyblue2"
        fontcolor="black"
        shape="box"
        style="filled"
        penwidth="1.0"
    ]
    edge [
        fontname="Arial"
        color="#00688b"
        fontcolor="black"
        fontsize="12"
        arrowsize="0.5"
        penwidth="1.0"
    ]




    "[cortado/rtas/linux_persistence_rpm_netcon.py]" -- "[cortado/rtas/linux_persistence_dpkg_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_python_netcon_file_creation.py]" -- "[cortado/rtas/linux_defense_evasion_hex_payload_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_rpm_netcon.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_rpm_netcon.py]" -- "[cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_dpkg_netcon.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py]" -- "[cortado/rtas/collection_keylog_rawinputdevice.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" -- "[cortado/rtas/linux_motd_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_netcon.py]" -- "[cortado/rtas/linux_python_netcon_file_creation.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_netcon.py]" -- "[cortado/rtas/linux_cron_hidden_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_motd_netcon.py]" -- "[cortado/rtas/linux_cron_hidden_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_motd_netcon_parent_child.py]" -- "[cortado/rtas/linux_persistence_dpkg_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_reverse_shell_or_listener_via_socat.py]" -- "[cortado/rtas/_common.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_dpkg_netcon.py]" -- "[cortado/rtas/linux_command_and_control_telegram_api_request.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_command_exec.py]" -- "[cortado/rtas/linux_defense_evasion_process_injection_via_dd.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_cron_hidden_execution.py]" -- "[cortado/rtas/collection_keylog_rawinputdevice.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_scheduled_task_executing_sus_located_binary.py]" -- "[cortado/rtas/linux_persistence_apt_package_manager_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" -- "[cortado/rtas/linux_defense_evasion_hex_payload_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_suspicious_echo_execution.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_scheduled_task_executing_sus_located_binary.py]" -- "[cortado/rtas/linux_defense_evasion_process_injection_via_dd.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_reverse_shell_or_listener_via_socat.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_executing_sus_located_binary.py]" -- "[cortado/rtas/linux_motd_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_initd_unusual_binary_execution.py]" -- "[cortado/rtas/linux_persistence_dpkg_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_scheduled_task_executing_sus_located_binary.py]" -- "[cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_setsid_nohup_unusual_execution.py]" -- "[cortado/rtas/linux_cron_hidden_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_file_creation.py]" -- "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_netcon.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_scheduled_task_executing_sus_located_binary.py]" -- "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_motd_netcon_parent_child.py]" -- "[cortado/rtas/linux_command_and_control_telegram_api_request.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_kill_from_executable_in_unusual_location.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_defense_evasion_hex_payload_execution.py]" -- "[cortado/rtas/_common.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_defense_evasion_hex_payload_execution.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_rpm_netcon.py]" -- "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py]" -- "[cortado/rtas/collection_keylog_rawinputdevice.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_file_creation.py]" -- "[cortado/rtas/collection_keylog_rawinputdevice.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_file_creation.py]" -- "[cortado/rtas/linux_persistence_apt_package_manager_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_command_and_control_telegram_api_request.py]" -- "[cortado/rtas/_common.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_unusual_scheduled_task_command_exection.py]" -- "[cortado/rtas/linux_execution_kill_from_executable_in_unusual_location.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_command_exec.py]" -- "[cortado/rtas/linux_persistence_apt_package_manager_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_defense_evasion_base64_xxd_decode_arg_evasion.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_netcon.py]" -- "[cortado/rtas/linux_persistence_apt_package_manager_execution.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_cron_hidden_execution.py]" -- "[cortado/rtas/linux_command_and_control_telegram_api_request.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_python_netcon_file_creation.py]" -- "[cortado/rtas/collection_keylog_rawinputdevice.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_suspicious_echo_execution.py]" -- "[cortado/rtas/linux_persistence_direct_crontab_modification.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_sus_netcon_command_exec.py]" -- "[cortado/rtas/linux_persistence_initd_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_execution_reverse_shell_or_listener_via_socat.py]" -- "[cortado/rtas/linux_command_and_control_ip_address_arg_from_hidden_executable.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_persistence_suspicious_echo_execution.py]" -- "[cortado/rtas/linux_persistence_initd_netcon.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_python_netcon_file_creation.py]" -- "[cortado/rtas/linux_execution_interactive_shell_spawn_from_hidden_process.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];
    "[cortado/rtas/linux_systemd_netcon.py]" -- "[cortado/rtas/linux_command_and_control_telegram_api_request.py]" [label=" 1 ", penwidth="1", color="#00688b5E"];

}