Assess who is behind a cyberattack campaign.
Evaluates cyber-campaign evidence against competing threat-actor hypotheses to produce a confidence-weighted attribution assessment.
When to use it
Use when an incident investigation needs a defensible attribution confidence level.
Give it campaign evidence and candidate-actor hypotheses as JSON files; it produces a ranked attribution report saved as JSON.
What you provide
Requires Python 3.9 or later.
Lists attackcti as a required Python library.
Lists stix2 as a required Python library.
Lists networkx as a required Python library.
No additional actions listed.