Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Threat Actor → Search
AI-generatedSummary
Search threat actors by term and return matching entries.
Inputs
- searchTerm — Term to search for in threat actor attributes.
- limit — Maximum number of results to return; default 50, max 500.
Output shape
array of threat actor records
Each record includes the threat actor's id, name, type, and core attributes; results may be truncated to the specified limit.
Examples
Example 1: Search for 'APT28' using default limit
searchTerm: 'APT28', limit: 50
Example 2: Search with custom limit of 200
searchTerm: 'ransomware', limit: 200
Example 3: Search with no term to list all actors
searchTerm: '', limit: 100