With the increasing sophistication of digital threats, companies must have effective tools to assess and mitigate risks. In this context, Axur introduces the Threat Actor Profile.
This tool provides users with an in-depth view of the actors present in the groups monitored by Axur, allowing a detailed analysis of threats and facilitating the implementation of effective prevention and remediation strategies.
What Does the Threat Actor Profile Do?
The Threat Actor Profile offers a range of valuable information to assist users in understanding digital threats. Here are some key features:
1. Actor Profile Details:
Activity: Data on the recent volume of actor activity.
Risk Level: Assessment of the risk associated with the actor.
Related Groups: Identification of groups where the actor has been observed.
Related Profiles: Connections between different profiles interacting in the groups.
2. Threat Actor Score:
Calculated based on the actor's interaction in the last 15 days and the volume of tickets generated for the actor across the Axur base.
The score is updated every 3 days, providing a dynamic view of the threat.
3. Also Known As (AKA):
Presents usernames or phones linked to WhatsApp, Telegram, and Discord accounts of the actor.
4. Top Groups and Channels:
List of groups and channels in which the actor participates, ranked by activity volume.
Ability to explore messages from these groups.
5. Activity:
Graph displaying the actor's activity volume in the last 6 months, including the current month.
Links to mentions and tickets related to the actor.
6. Target Industries:
Analysis of the actor's target industries based on generated tickets, highlighting the percentage participation in each sector.
7. Interactions:
Presents up to 5 top-related actors, identified by a Machine Learning model.
8. Request Investigation:
Allows requesting a more in-depth investigation into the actor.
9. Bonus:
Ability to filter threat actor accounts in the Deep & Dark Web ticket area and Explore.
What Doesn't the Threat Actor Profile Do?
It is not possible to create a threat actor without an associated detection, ensuring accuracy in analyses.
It does not yet include threat actor profiles for platforms not mentioned earlier.
FAQ
Which accounts are displayed in a threat actor profile with linked accounts?
The account with the highest score automatically determines the main name of the threat actor.
Why might the main name be different in Explore results and tickets?
In Explore results and tickets, the displayed profile corresponds to the original account. On the Threat Actor page, the name of the account with the highest score is shown.
Is the Threat Actor Profile available in all plans?
Currently, the functionality is available for customers with Deep & Dark Web VIP and SuperVIP monitoring plans. Please consult your CSM to better understand how to upgrade.
If you have any questions, feel free to reach out at [email protected] 😊