This is perfect, thanks Tim. I updated the text and changed “Operational” to “Practitioner”.
From: <> on behalf of "Casey, Timothy P" <>
Date: Friday, July 15, 2016 at 2:16 PM
To: "" <>
Subject: [cti] Threat Actor items
Here is a suggested re-wording of the “Contest” vocabulary item for Attack Resource Level for Threat Actor:
“A short-lived and perhaps anonymous interaction that concludes when an ad-hoc group of participants have achieved a single goal. For example, people who break into
systems just for thrills or prestige may hold a contest to see who can break into a specific target first. It also includes announced "operations" to achieve a specific goal, such as the original "OpIsrael" call for volunteers to disrupt all Israel internet
functions for a day. Minimum Sophistication level: ???.”
There were some changes suggested to Sophistication Level that will need to be reflected in the other Attack Resource Level descriptions. This one was formerly “Operational,”
indicating a moderate level of sophistication but little long-term planning or development capabilities.
If there are other items for updating please let me know.
Tim
