diff --git a/unified-secops-platform/microsoft-threat-actor-naming.md b/unified-secops-platform/microsoft-threat-actor-naming.md index 51d8df428c..184eb8162d 100644 --- a/unified-secops-platform/microsoft-threat-actor-naming.md +++ b/unified-secops-platform/microsoft-threat-actor-naming.md @@ -42,11 +42,10 @@ In this taxonomy, a weather event or *family name* represents one of the above c Threat actors within the same weather family are given an adjective to distinguish actor groups with distinct tactics, techniques, and procedures (TTPs), infrastructure, objectives, or other identified patterns. For groups in development, we use a temporary designation of Storm and a four-digit number where there's a newly discovered, unknown, emerging, or developing cluster of threat activity. -The following table shows how the family names map to the threat actors that we track. +The following table shows how these family names map to the threat actors that we track: |Threat actor category|Type|Family name| |:---|:---|:---| -|Nation-state|China
Iran
Lebanon
North Korea
Russia
South Korea
Türkiye
Vietnam|Typhoon
Sandstorm
Rain
Sleet
Blizzard
Hail
Dust
Cyclone| |Nation-state|China
Germany
India
Iran
North Korea
Lebanon
Pakistan
Palestinian Authority
Russia
Singapore
South Korea
Spain
Syria
Türkiye
Ukraine
United States
Vietnam|Typhoon
Gale
Monsoon
Sandstorm
Sleet
Rain
Whirlwind
Lightning
Blizzard
Squall
Hail
Derecho
Haze
Dust
Frost
Tornado
Cyclone| |Financially motivated|Financially motivated|Tempest| |Private sector offensive actors|PSOAs|Tsunami|