search

MISP / misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)
https://misp-galaxy.org/
Other
513 stars 257 forks source link

MSFT threat actor names #841

Closed 3c7 closed 1 year ago

3c7 commented 1 year ago

WIP

3c7 commented 1 year ago

This PR may need further changes as I skipped DEV clusters.

3c7 commented 1 year ago

For reference: https://learn.microsoft.com/de-de/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide

3c7 commented 1 year ago

Just realized that there is a specific galaxy cluster for MSFT names, so maybe it's better to use that. Did not know about that one before.