Intelligence
What is Threat actor profile?
A structured summary of a threat actor: aliases, motivation, targets, TTPs, tools, infrastructure habits and history.
A threat actor profile collects what is known about one actor in a consistent structure: names and aliases used by different vendors, suspected origin and sponsor, motivation, targeted sectors and regions, initial access methods, TTPs mapped to ATT&CK, tools, infrastructure habits, notable campaigns and confidence levels.
A good profile is maintained, not written once. It is most valuable when it ends with what the actor means for this organisation and which defences matter most against it.