colander_data_converter.base.types.actor

class colander_data_converter.base.types.actor.ActorType[source]

Bases: CommonEntityType

ActorType represents metadata for actors in Colander. Check the list of supported types.

Example

>>> actor_type = ActorTypes.INDIVIDUAL.value
>>> print(actor_type.name)
Individual
Fields:

Validators:
validator is_supported_type  »  short_name[source]
class colander_data_converter.base.types.actor.ActorTypes(*values)[source]

Bases: Enum

ActorTypes provides access to all supported actor types.

This class loads actor type definitions from the actor types JSON file and exposes them as an enum. It also provides a method to look up an actor type by its short name.

Example

>>> actor_type = ActorTypes.INDIVIDUAL.value
>>> print(actor_type.name)
Individual
>>> default_type = ActorTypes.by_short_name("nonexistent")
>>> print(default_type.name)
Generic
classmethod by_short_name(short_name)[source]
APT = APT

APT - An advanced persistent threat group, typically well-resourced and highly skilled.

COMPANY = COMPANY

Private company - A privately owned business entity, often a target or participant in cyber activities.

CYBER_CRIMINAL = CYBER_CRIMINAL

Cyber criminal - An individual or group engaging in illegal activities for financial gain.

GENERIC = GENERIC

Generic - A generic or unspecified actor type.

HACKTIVIST = HACKTIVIST

Hacktivist - An individual or group using hacking to promote political or social agendas.

INDIVIDUAL = INDIVIDUAL

Individual - A single person involved in threat activity or as a target.

INSIDER = INSIDER

Insider threat - An individual within an organization posing a security risk.

NATION_STATE = NATION_STATE

Nation-state actor - A government-sponsored group conducting cyber operations.

NGO = NGO

NGO - A non-governmental organization.

PUB_INST = PUB_INST

Public institution - A government or public sector organization.

THREAT_ACTOR = THREAT_ACTOR

Threat actor - An individual or group responsible for malicious cyber activities.

default = GENERIC