Skip to content

Commit ee8898b

Browse files
authored
Merge pull request #1243 from MISP/codex/add-origin-attribution-to-threat-actor-cluster
Add `name-attribution` mappings to threat actors; add Secureworks and MITRE producers
2 parents 160370b + a8c7344 commit ee8898b

2 files changed

Lines changed: 2551 additions & 3 deletions

File tree

clusters/producer.json

Lines changed: 45 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2970,7 +2970,51 @@
29702970
},
29712971
"uuid": "58958484-3b8d-42c1-85af-b39a9df9496f",
29722972
"value": "Meta"
2973+
},
2974+
{
2975+
"description": "Secureworks is a cybersecurity company that provides threat intelligence, managed detection and response, incident response, and security consulting services. Its Counter Threat Unit (CTU) research team maintains threat group profiles and a threat actor naming system.",
2976+
"meta": {
2977+
"company-type": [
2978+
"Cyber Security Vendor"
2979+
],
2980+
"country": "US",
2981+
"official-refs": [
2982+
"https://www.secureworks.com/"
2983+
],
2984+
"refs": [
2985+
"https://www.secureworks.com/research/threat-profiles"
2986+
],
2987+
"synonyms": [
2988+
"SecureWorks",
2989+
"Dell SecureWorks",
2990+
"Secureworks Counter Threat Unit",
2991+
"Secureworks CTU"
2992+
]
2993+
},
2994+
"uuid": "a7119872-bc6b-494b-9f7a-8c50faaf53a9",
2995+
"value": "Secureworks"
2996+
},
2997+
{
2998+
"description": "MITRE is a not-for-profit organization that operates federally funded research and development centers. MITRE maintains ATT&CK, a knowledge base of adversary tactics and techniques that assigns group identifiers to tracked intrusion sets.",
2999+
"meta": {
3000+
"company-type": [
3001+
"Not-for-profit organization"
3002+
],
3003+
"country": "US",
3004+
"official-refs": [
3005+
"https://www.mitre.org/"
3006+
],
3007+
"refs": [
3008+
"https://attack.mitre.org/groups/"
3009+
],
3010+
"synonyms": [
3011+
"The MITRE Corporation",
3012+
"MITRE ATT&CK"
3013+
]
3014+
},
3015+
"uuid": "a1ad5090-2487-46d2-8237-6151a2dd5063",
3016+
"value": "MITRE"
29733017
}
29743018
],
2975-
"version": 24
3019+
"version": 25
29763020
}

0 commit comments

Comments
 (0)