Slot: threat_actor

A threat actor is an individual or group that conducts malicious cyber

activities, often with financial, political, or ideological motives.

URI: ocsf:threat_actor Alias: threat_actor

Applicable Classes

Name	Description	Modifies Slot
Osint	The OSINT (Open Source Intelligence) object contains details related to an	no

Properties

Type and Range

Property	Value
Range	ThreatActor
Domain Of	Osint

Cardinality and Requirements

Property	Value

Aliases

• Threat Actor

See Also

• https://stixproject.github.io/data-model/1.2/ta/ThreatActorType/

Notes

• STIX Threat Actor definition — https://stixproject.github.io/data-model/1.2/ta/ThreatActorType/

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:threat_actor
native	ocsf:threat_actor

LinkML Source

name: threat_actor
description: 'A threat actor is an individual or group that conducts malicious cyber

  activities, often with financial, political, or ideological motives.'
notes:
- 'STIX Threat Actor definition —

  https://stixproject.github.io/data-model/1.2/ta/ThreatActorType/'
from_schema: https://w3id.org/lmodel/ocsf
see_also:
- https://stixproject.github.io/data-model/1.2/ta/ThreatActorType/
aliases:
- Threat Actor
rank: 1000
alias: threat_actor
domain_of:
- Osint
range: ThreatActor