Cyber Threat Actors
Know your adversaries! I don't like reinventing the wheel, and luckily, on this one I don't have to.
ETDA Threat Actor Database
The Electronic Transactions Development Agency out of Thailand has created what I consider the best database of cyber threat actors. It coalesces several OSINT sources you'd typically check for research into a single, well-maintained reference.
If you know me, you know I don't like to reinvent the wheel. This database does everything I'd want a threat actor reference to do, and it's free.
Other Actor References
ATT&CK's actor database with TTP mappings. Essential for understanding how specific groups operate.
Malware-focused library with actor associations. Great for tracking tooling to threat groups.
Not actor-specific, but critical for understanding what threat actors are actively exploiting in the wild.
Mandiant's (now Google's) public APT group profiles. One of the deepest vendor-produced actor libraries available for free.
Recorded Future's research arm, covering state-sponsored and financially-motivated threat groups.
The largest open malware sample and research archive on the internet. Not actor-profile format, but essential for pairing tooling to actors.
Want to learn how to build your own threat actor profiles? Check out the Trainings page.
View Trainings →