NAME

STIX::ThreatActor - STIX Domain Object (SDO) - Threat Actor

SYNOPSIS

use STIX::ThreatActor;

my $threat_actor = STIX::ThreatActor->new();

DESCRIPTION

Threat Actors are actual individuals, groups, or organizations believed to be operating with malicious intent.

METHODS

STIX::ThreatActor inherits all methods from STIX::Common::Properties and implements the following new ones.

STIX::ThreatActor->new(%properties)

Create a new instance of STIX::ThreatActor.

$threat_actor->aliases

A list of other names that this Threat Actor is believed to use.

$threat_actor->description

A description that provides more details and context about the Threat Actor.

$threat_actor->first_seen

The time that this Threat Actor was first seen.

$threat_actor->goals

The high level goals of this Threat Actor, namely, what are they trying to do.

$threat_actor->id
$threat_actor->last_seen

The time that this Threat Actor was last seen.

$threat_actor->name

A name used to identify this Threat Actor or Threat Actor group.

$threat_actor->personal_motivations

The personal reasons, motivations, or purposes of the Threat Actor regardless of organizational goals. (See ATTACK_MOTIVATION in STIX::Common::OpenVocabulary)

$threat_actor->primary_motivation

The primary reason, motivation, or purpose behind this Threat Actor. (See ATTACK_MOTIVATION in STIX::Common::OpenVocabulary)

$threat_actor->resource_level

This defines the organizational level at which this Threat Actor typically works. (See ATTACK_RESOURCE_LEVEL in STIX::Common::OpenVocabulary)

$threat_actor->roles

This is a list of roles the Threat Actor plays. (See THREAT_ACTOR_ROLE in STIX::Common::OpenVocabulary)

$threat_actor->secondary_motivations

The secondary reasons, motivations, or purposes behind this Threat Actor. (See ATTACK_MOTIVATION in STIX::Common::OpenVocabulary)

$threat_actor->sophistication

The skill, specific knowledge, special training, or expertise a Threat Actor must have to perform the attack. (See THREAT_ACTOR_SOPHISTICATION in STIX::Common::OpenVocabulary)

$threat_actor->threat_actor_types

This field specifies the type of threat actor. (See THREAT_ACTOR_TYPE in STIX::Common::OpenVocabulary)

$threat_actor->type

The type of this object, which MUST be the literal threat-actor.

HELPERS

$threat_actor->TO_JSON

Encode the object in JSON.

$threat_actor->to_hash

Return the object HASH.

$threat_actor->to_string

Encode the object in JSON.

$threat_actor->validate

Validate the object using JSON Schema (see STIX::Schema).

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-STIX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-STIX

git clone https://github.com/giterlizzi/perl-STIX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.