---
schema-version: v1.2.9
id: OASISSTIX-v1.2.1-Threat-actor-CS01-Pt7
title:
- content: 'STIX(TM) Version 1.2.1. Part 7: Threat Actor'
  language:
  - en
  script:
  - Latn
  format: text/plain
  type: main
link:
- content: http://docs.oasis-open.org/cti/stix/v1.2.1/cs01/part7-threat-actor/stix-v1.2.1-cs01-part7-threat-actor.html
  type: src
type: standard
docid:
- id: OASIS STIX-v1.2.1-Threat-actor-CS01-Pt7
  type: OASIS
  primary: true
docnumber: STIX-v1.2.1-Threat-actor-CS01-Pt7
date:
- type: issued
  value: '2016-05-05'
contributor:
- organization:
    name:
    - content: OASIS
    contact:
    - uri: https://www.oasis-open.org/
  role:
  - description:
    - content: Standards Development Organization
    type: authorizer
  - type: publisher
- organization:
    name:
    - content: OASIS Cyber Threat Intelligence (CTI) TC
    contact:
    - uri: https://www.oasis-open.org/committees/cti/
  role:
  - description:
    - content: Committee
    type: authorizer
- person:
    name:
      given:
        forename:
        - content: Richard
          language:
          - en
          script:
          - Latn
      surname:
        content: Struse
        language:
        - en
        script:
        - Latn
    affiliation:
    - organization:
        name:
        - content: DHS Office of Cybersecurity and Communications (CS&C)
        contact:
        - uri: http://www.dhs.gov/office-cybersecurity-and-communications
    contact:
    - email: Richard.Struse@HQ.DHS.GOV
  role:
  - description:
    - content: Chair
    type: editor
- person:
    name:
      given:
        forename:
        - content: Sean
          language:
          - en
          script:
          - Latn
      surname:
        content: Barnum
        language:
        - en
        script:
        - Latn
    affiliation:
    - organization:
        name:
        - content: MITRE Corporation
        contact:
        - uri: http://www.mitre.org/
    contact:
    - email: sbarnum@mitre.org
  role:
  - type: editor
- person:
    name:
      given:
        forename:
        - content: Desiree
          language:
          - en
          script:
          - Latn
      surname:
        content: Beck
        language:
        - en
        script:
        - Latn
    affiliation:
    - organization:
        name:
        - content: MITRE Corporation
        contact:
        - uri: http://www.mitre.org/
    contact:
    - email: dbeck@mitre.org
  role:
  - type: editor
- person:
    name:
      given:
        forename:
        - content: Aharon
          language:
          - en
          script:
          - Latn
      surname:
        content: Chernin
        language:
        - en
        script:
        - Latn
    affiliation:
    - organization:
        name:
        - content: Soltra
        contact:
        - uri: http://www.soltra.com/
    contact:
    - email: achernin@soltra.com
  role:
  - type: editor
- person:
    name:
      given:
        forename:
        - content: Rich
          language:
          - en
          script:
          - Latn
      surname:
        content: Piazza
        language:
        - en
        script:
        - Latn
    affiliation:
    - organization:
        name:
        - content: MITRE Corporation
        contact:
        - uri: http://www.mitre.org/
    contact:
    - email: rpiazza@mitre.org
  role:
  - type: editor
language:
- en
script:
- Latn
abstract:
- content: The Structured Threat Information Expression (STIX) framework defines nine
    core constructs and the relationships between them for the purposes of modeling
    cyber threat information and enabling cyber threat information analysis and sharing. 
    This specification document defines the Threat Actor construct, which captures
    characterizations of malicious actors (or adversaries) representing a cyber attack
    threat including presumed intent and historically observed behavior.
  language:
  - en
  script:
  - Latn
  format: text/plain
relation:
- type: partOf
  bibitem:
    formattedref:
      content: OASIS STIX-v1.2.1-CS01
      format: text/plain
doctype:
  type: specification
editorialgroup:
- name: "OASIS Cyber Threat\r\nIntelligence (CTI) TC"
ext:
  schema-version: v1.0.1
technology_area:
- Cybersecurity