actor_associations

The actor_associations lookup table is one of the data sources for the AI Actor Profile dashboard. It includes information about threat actor associations available in your ThreatStream instance. The table is read-only and not subject to modification.

(Click the image to enlarge it)

Field Value Type Description Examples
actor_id string ID of the Actor.

  • 5

  • 22

  • 55
actor_name string Name of the Actor.

  • Pirpi

  • Weekby

  • Axiom
associated_id string ID of the association for the Actor.

  • 204

  • 26,994,362

  • 9,895
associated_name string Name of the association for the Actor.

  • SHOTPUT

  • HTTPBrowser

  • T1105 - Ingress Tool Transfer

  • c487c830ff5a342513603a5cb75bd6de
associated_type string Threat model type of the association for the Actor.

  • malware

  • tipreport

  • attackpattern
created_ts date

Time stamp of when the Actor was created on ThreatStream.

Date is specified in the following format:

MMM dd, yyyy HH:mm:ss.SSS Z where

  • MMM - month name

  • dd - day of the month

  • yyyy - year

  • HH - hour (24-clock, 2 digits)

  • mm - minutes

  • ss - seconds

  • .SSS - milliseconds (3 digits)

  • Z - timezone offset from UTC

 Aug 22, 2024 03:55:47.000 -07