Cyber Threat Actors
Know your adversaries. Jen doesn't like to reinvent the wheel, and on this one, she doesn't have to.
ETDA Threat Actor Database
The Electronic Transactions Development Agency out of Thailand has created what Jen considers the best database of cyber threat actors. It coalesces several OSINT sources you'd typically check for research into a single, well-maintained reference.
If you know me, you know I don't like to reinvent the wheel. This database does everything I'd want a threat actor reference to do, and it's free.
Other Actor References
ATT&CK's actor database with TTP mappings. Essential for understanding how specific groups operate.
Malware-focused library with actor associations. Great for tracking tooling to threat groups.
Not actor-specific, but critical for understanding what threat actors are actively exploiting in the wild.
Mandiant's (now Google's) public APT group profiles. One of the deepest vendor-produced actor libraries available for free.
Recorded Future's research arm, covering state-sponsored and financially-motivated threat groups.
The largest open malware sample and research archive on the internet. Not actor-profile format, but essential for pairing tooling to actors.
Want to learn how to build your own threat actor profiles? Check out the Trainings page.
View Trainings →