Get Actor Profile action.
Note: Maximum 1 request per second is allowed.
Parameters
| Parameter | Description |
|---|---|
| Active Sources | A comma-separated list of active sources to filter by. Note: To obtain an up-to-date list of active sources, run an empty List Threat Actors action. |
| MITRE | A comma-separated list of MITRE IDs to filter by. |
| Motivations | The motivations to filter by. |
| Offset | The offset to start returning results from. |
| Origins | The origins to filter by. |
| Query | The query used on actor properties to filter results by handles, summary, contacts and more.Note: If not provided, the request returns results according to the Actor Hub UI behavior, ranked by best match. |
| Size | The maximum number of results to return. Note: Maximum 1000 results are allowed. |
| Sort By | The field to sort the results by. |
| Sort Order | The order to sort the results by. |
| Statuses | The statuses to filter by. |
| Targeted Geographies | The targeted geographies to filter by. |
| Targeted Sectors | The targeted sectors to filter by. |
| Types | The types to filter by. |
Example Output
{
"totalUnfilteredCount": "Number",
"total": "Number",
"results": [
{
"threat_actor_id": "String",
"summary": {
"value": "String"
},
"current_name": {
"value": "String"
},
"current_profile_picture_src": {
"value": "String (URL)"
},
"is_aggregated": "Boolean",
"handles": [
{
"value": "String"
}
],
"motivation": [
{
"value": "String"
}
],
"origin": [
{
"value": "String"
}
],
"status": [
{
"value": "String"
}
],
"type": [
{
"value": "String"
}
],
"targeted_geographies": [
{
"value": "String"
}
],
"targeted_sectors": [
{
"value": "String"
}
],
"highlights": {},
"active_sources": [
{
"value": "String",
"count": "Number"
}
],
"last_updated": "Unix timestamps",
"mitre": [
{
"value": "String",
"label": "String",
"group": "String"
}
],
"values_counter": {
"handles": "Number",
"motivation": "Number",
"origin": "Number",
"status": "Number",
"type": "Number",
"targeted_geographies": "Number",
"targeted_sectors": "Number",
"active_sources": "Number",
"mitre": "Number"
}
}
],
"filters": {
"motivations": [
{
"key": "String",
"doc_count": "Number"
}
],
"types": [
{
"key": "String",
"doc_count": "Number"
}
],
"origins": [
{
"key": "String",
"doc_count": "Number"
}
],
"statuses": [
{
"key": "String",
"doc_count": "Number"
}
],
"targeted_geographies": [
{
"key": "String",
"doc_count": "Number"
}
],
"targeted_sectors": [
{
"key": "String",
"doc_count": "Number"
}
],
"active_sources": [
{
"key": "String",
"doc_count": "Number"
}
],
"mitre": [
{
"key": "String",
"doc_count": "Number",
"label": "String",
"group": "String"
}
]
}
}
Workflow Library Example
List Threat Actors with Kela and Send Results Via Email