Three views
APT groups, dark web sources and dark web actors in separate tabs.
ACTORS APT groups, dark web sources and actors
Threat Actors
Each actor's aliases, target sectors and countries, motivation, activity and risk score; the profile holds an executive summary, MITRE ATT&CK mapping, kill chain, toolkit, rules and IoCs.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
An actor profile has ten tabs: overview, how it works, IoA / kill chain, MITRE ATT&CK, history, case studies, arsenal, rules, IoCs and news. The executive summary describes the group's methods and targets with sources; the technical team drops from the same page into rules and indicators. The list screen carries the latest APT news alongside.
What it does
MITRE ATT&CK
Techniques are tied to the group's profile; rules and IoCs filter by technique.
Target matching
Groups whose target sectors and countries overlap yours are surfaced.
What you get
- Real actor data enters your threat model.
- Management and the technical team read the same profile.
- Defensive priority is set by the groups that target you.
Scenarios featuring this module
A ransomware crew shifting target sectors
Leak site telemetry showed a clear sector and geography shift in the crew's victim distribution.
3 modules
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.