rf-threat-actors
List threat actors from Recorded Future Threat Map.
Syntax
rf-threat-actors [profile=PROFILE] [org-id=ORG-ID] [pretty=PRETTY]
- profile=PROFILE
- Optional. Recorded Future connect profile code
- org-id=ORG-ID
- Optional. Organization ID for organization-specific threat actors
- pretty=PRETTY
- Optional. Join aliases and categories with newlines (t/f). Default: f
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| actor_id | String | Actor ID | Threat actor ID |
| actor_name | String | Actor Name | Threat actor name |
| aliases | List | Aliases | Alias names (string if pretty=t) |
| categories | List | Categories | Category names (string if pretty=t) |
| intent | Integer | Intent | Intent score |
| opportunity | Integer | Opportunity | Opportunity score |