skills.rest
jassics
jassicsCOMMUNITY
Explore all skills by this author →
Website𝕏@jassicsGitHub

threat-actor-profiling

Profile threat actors and campaigns with TTPs mapped to MITRE ATT&CK.

6|Updated May 30, 2026
Search Tags:#cybersecurity#threat intelligence#security strategy#MITRE ATT&CK#actor profiling
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill threat-actor-profiling-jassics
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-actor-profiling
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/threat-intelligence/skills/threat-actor-profiling
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill threat-actor-profiling-jassics

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill profiles threat actors and campaigns, detailing their tactics, targets, and potential impact to inform effective defense strategies.

Core Features & Use Cases

  • Actor Profiling: Identify TTPs, targeting, tooling, infrastructure, and intent.
  • Defense Strategy: Understand who might target you and how to prioritize defenses.
  • Use Case: Create a profile for a known cyber threat actor to inform your detection and control measures.

Quick Start

Run the 'threat-actor-profiling' skill to create a profile for the actor 'CyberGroupXYZ'.

Frequently Asked Questions about threat-actor-profiling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a threat actor profile using MITRE ATT&CK mapping?▼

To generate a threat actor profile mapped to MITRE ATT&CK, you input the actor or campaign name to extract their tactics, techniques, targets, tooling, infrastructure, and likely intent. This profiling process details TTPs to inform your defense strategies.

What is threat actor profiling and when do I need it for security strategy?▼

Threat actor profiling is the process of detailing a cyber threat actor's tactics, targets, and potential impact. You need threat actor profiling when enhancing threat intelligence to understand who might target your organization and how to prioritize your defenses.

How do I map threat actor TTPs to prioritize defense strategies?▼

You map threat actor TTPs to defense strategies by profiling the campaign to identify specific tactics, tooling, and infrastructure. This maps their behaviors to MITRE ATT&CK frameworks, allowing you to understand their intent and prioritize effective detection and control measures.

Can I use threat intelligence to profile a specific cyber campaign?▼

Yes, you can use threat intelligence to profile a specific cyber campaign by inputting the campaign name to analyze its tactics, targets, and potential impact. This generates a detailed profile of the actor's TTPs and infrastructure to inform your defense strategy.

Does threat actor profiling work without existing infrastructure dependencies?▼

Yes, threat actor profiling works without existing infrastructure dependencies because it operates as a standalone skill. It requires no external dependencies to analyze threat intelligence and generate detailed profiles of an actor's tactics, tooling, and potential impact.

Related Skills

trungdo9trungdo9
3

cti-expert

Automate cyber threat intelligence investigations using OSINT and forensic analysis.

Community
Advanced
YukiIto1999YukiIto1999

analyzing-threat-actor-ttps-with-mitre-navigator

Map threat actor TTPs to MITRE ATT&CK Navigator and generate layer JSON files.

Community
Intermediate
makyua-sanmakyua-san

cso

Audit infrastructure security posture and generate a Security Posture Report with severity ratings.

Community
Advanced
aviskaaraviskaar
6

threat-hunter

Conduct proactive threat hunting campaigns using MITRE ATT&CK frameworks.

Official
Advanced