THREAT ACTORS – TTPs : Decoding The Digital Underworld Through Comprehensive Mapping

This repository was created with the aim of assisting companies and independent researchers about Tactics, Techniques and Procedures adopted by Ransomware Operators/Groups active or not and also threat actors that are operating in society.

In addition to mapping Tactics, Techniques and Procedures, I am inserting data on commands, tools, useful locations for researching artifacts and others.

The main focus is to assist organizations and individual researchers on each type of actor, providing a summary of their trajectory and additional information that can be used.

STRUCTURE OF THE REPOSITORY

FOLDER	DESCRIPTION
Actor’s Name	Description of activities, operation details, TTPs and Tools used
Commands	Repository intended to insert commands captured based on DFIR and CTI activities of Threat Actors, Ransomware groups and affiliates
Payload locations	Repository designed to inform locations commonly used to execute ransomware and other threats

Ransomware Tool Matrix : The Arsenal Of Cyber Defense

February 28, 2025

In "Cyber security"

Atomic Red Team : Mastering Threat Simulations For Advanced Security Testing

March 5, 2025

In "Cyber security"

Unit42 Timely Threat Intel : Sports-Themed Crypto Scams Exploiting Super Bowl Hype

February 19, 2025

In "Cyber security"

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.