blue-team-tools/tools/config/mitre/groups.json

[
  {
    "group_id": "G0001",
    "group": "Axiom",
    "url": "https://attack.mitre.org/groups/G0001",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0002",
    "group": "Moafee",
    "url": "https://attack.mitre.org/groups/G0002",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0003",
    "group": "Cleaver",
    "url": "https://attack.mitre.org/groups/G0003",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0004",
    "group": "Ke3chang",
    "url": "https://attack.mitre.org/groups/G0004",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0005",
    "group": "APT12",
    "url": "https://attack.mitre.org/groups/G0005",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0006",
    "group": "APT1",
    "url": "https://attack.mitre.org/groups/G0006",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0007",
    "group": "APT28",
    "url": "https://attack.mitre.org/groups/G0007",
    "domain": [
      "Enterprise",
      "Mobile"
    ]
  },
  {
    "group_id": "G0008",
    "group": "Carbanak",
    "url": "https://attack.mitre.org/groups/G0008",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0009",
    "group": "Deep Panda",
    "url": "https://attack.mitre.org/groups/G0009",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0010",
    "group": "Turla",
    "url": "https://attack.mitre.org/groups/G0010",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0011",
    "group": "PittyTiger",
    "url": "https://attack.mitre.org/groups/G0011",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0012",
    "group": "Darkhotel",
    "url": "https://attack.mitre.org/groups/G0012",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0013",
    "group": "APT30",
    "url": "https://attack.mitre.org/groups/G0013",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0014",
    "group": "Night Dragon",
    "url": "https://attack.mitre.org/groups/G0014",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0016",
    "group": "APT29",
    "url": "https://attack.mitre.org/groups/G0016",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0017",
    "group": "DragonOK",
    "url": "https://attack.mitre.org/groups/G0017",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0018",
    "group": "admin@338",
    "url": "https://attack.mitre.org/groups/G0018",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0019",
    "group": "Naikon",
    "url": "https://attack.mitre.org/groups/G0019",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0020",
    "group": "Equation",
    "url": "https://attack.mitre.org/groups/G0020",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0021",
    "group": "Molerats",
    "url": "https://attack.mitre.org/groups/G0021",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0022",
    "group": "APT3",
    "url": "https://attack.mitre.org/groups/G0022",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0023",
    "group": "APT16",
    "url": "https://attack.mitre.org/groups/G0023",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0024",
    "group": "Putter Panda",
    "url": "https://attack.mitre.org/groups/G0024",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0025",
    "group": "APT17",
    "url": "https://attack.mitre.org/groups/G0025",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0026",
    "group": "APT18",
    "url": "https://attack.mitre.org/groups/G0026",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0027",
    "group": "Threat Group-3390",
    "url": "https://attack.mitre.org/groups/G0027",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0028",
    "group": "Threat Group-1314",
    "url": "https://attack.mitre.org/groups/G0028",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0029",
    "group": "Scarlet Mimic",
    "url": "https://attack.mitre.org/groups/G0029",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0030",
    "group": "Lotus Blossom",
    "url": "https://attack.mitre.org/groups/G0030",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0031",
    "group": "Dust Storm",
    "url": "https://attack.mitre.org/groups/G0031",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0032",
    "group": "Lazarus Group",
    "url": "https://attack.mitre.org/groups/G0032",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0033",
    "group": "Poseidon Group",
    "url": "https://attack.mitre.org/groups/G0033",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0034",
    "group": "Sandworm Team",
    "url": "https://attack.mitre.org/groups/G0034",
    "domain": [
      "Enterprise",
      "ICS",
      "Mobile"
    ]
  },
  {
    "group_id": "G0035",
    "group": "Dragonfly",
    "url": "https://attack.mitre.org/groups/G0035",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0036",
    "group": "GCMAN",
    "url": "https://attack.mitre.org/groups/G0036",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0037",
    "group": "FIN6",
    "url": "https://attack.mitre.org/groups/G0037",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0038",
    "group": "Stealth Falcon",
    "url": "https://attack.mitre.org/groups/G0038",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0039",
    "group": "Suckfly",
    "url": "https://attack.mitre.org/groups/G0039",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0040",
    "group": "Patchwork",
    "url": "https://attack.mitre.org/groups/G0040",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0041",
    "group": "Strider",
    "url": "https://attack.mitre.org/groups/G0041",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0043",
    "group": "Group5",
    "url": "https://attack.mitre.org/groups/G0043",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0044",
    "group": "Winnti Group",
    "url": "https://attack.mitre.org/groups/G0044",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0045",
    "group": "menuPass",
    "url": "https://attack.mitre.org/groups/G0045",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0046",
    "group": "FIN7",
    "url": "https://attack.mitre.org/groups/G0046",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0047",
    "group": "Gamaredon Group",
    "url": "https://attack.mitre.org/groups/G0047",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0048",
    "group": "RTM",
    "url": "https://attack.mitre.org/groups/G0048",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0049",
    "group": "OilRig",
    "url": "https://attack.mitre.org/groups/G0049",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0050",
    "group": "APT32",
    "url": "https://attack.mitre.org/groups/G0050",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0051",
    "group": "FIN10",
    "url": "https://attack.mitre.org/groups/G0051",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0052",
    "group": "CopyKittens",
    "url": "https://attack.mitre.org/groups/G0052",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0053",
    "group": "FIN5",
    "url": "https://attack.mitre.org/groups/G0053",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0054",
    "group": "Sowbug",
    "url": "https://attack.mitre.org/groups/G0054",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0055",
    "group": "NEODYMIUM",
    "url": "https://attack.mitre.org/groups/G0055",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0056",
    "group": "PROMETHIUM",
    "url": "https://attack.mitre.org/groups/G0056",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0059",
    "group": "Magic Hound",
    "url": "https://attack.mitre.org/groups/G0059",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0060",
    "group": "BRONZE BUTLER",
    "url": "https://attack.mitre.org/groups/G0060",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0061",
    "group": "FIN8",
    "url": "https://attack.mitre.org/groups/G0061",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0062",
    "group": "TA459",
    "url": "https://attack.mitre.org/groups/G0062",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0063",
    "group": "BlackOasis",
    "url": "https://attack.mitre.org/groups/G0063",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0064",
    "group": "APT33",
    "url": "https://attack.mitre.org/groups/G0064",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0065",
    "group": "Leviathan",
    "url": "https://attack.mitre.org/groups/G0065",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0066",
    "group": "Elderwood",
    "url": "https://attack.mitre.org/groups/G0066",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0067",
    "group": "APT37",
    "url": "https://attack.mitre.org/groups/G0067",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0068",
    "group": "PLATINUM",
    "url": "https://attack.mitre.org/groups/G0068",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0069",
    "group": "MuddyWater",
    "url": "https://attack.mitre.org/groups/G0069",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0070",
    "group": "Dark Caracal",
    "url": "https://attack.mitre.org/groups/G0070",
    "domain": [
      "Enterprise",
      "Mobile"
    ]
  },
  {
    "group_id": "G0071",
    "group": "Orangeworm",
    "url": "https://attack.mitre.org/groups/G0071",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0072",
    "group": "Honeybee",
    "url": "https://attack.mitre.org/groups/G0072",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0073",
    "group": "APT19",
    "url": "https://attack.mitre.org/groups/G0073",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0074",
    "group": "Dragonfly 2.0",
    "url": "https://attack.mitre.org/groups/G0074",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0075",
    "group": "Rancor",
    "url": "https://attack.mitre.org/groups/G0075",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0076",
    "group": "Thrip",
    "url": "https://attack.mitre.org/groups/G0076",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0077",
    "group": "Leafminer",
    "url": "https://attack.mitre.org/groups/G0077",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0078",
    "group": "Gorgon Group",
    "url": "https://attack.mitre.org/groups/G0078",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0079",
    "group": "DarkHydrus",
    "url": "https://attack.mitre.org/groups/G0079",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0080",
    "group": "Cobalt Group",
    "url": "https://attack.mitre.org/groups/G0080",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0081",
    "group": "Tropic Trooper",
    "url": "https://attack.mitre.org/groups/G0081",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0082",
    "group": "APT38",
    "url": "https://attack.mitre.org/groups/G0082",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0083",
    "group": "SilverTerrier",
    "url": "https://attack.mitre.org/groups/G0083",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0084",
    "group": "Gallmaker",
    "url": "https://attack.mitre.org/groups/G0084",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0085",
    "group": "FIN4",
    "url": "https://attack.mitre.org/groups/G0085",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0087",
    "group": "APT39",
    "url": "https://attack.mitre.org/groups/G0087",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0088",
    "group": "TEMP.Veles",
    "url": "https://attack.mitre.org/groups/G0088",
    "domain": [
      "Enterprise",
      "ICS"
    ]
  },
  {
    "group_id": "G0089",
    "group": "The White Company",
    "url": "https://attack.mitre.org/groups/G0089",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0090",
    "group": "WIRTE",
    "url": "https://attack.mitre.org/groups/G0090",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0091",
    "group": "Silence",
    "url": "https://attack.mitre.org/groups/G0091",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0092",
    "group": "TA505",
    "url": "https://attack.mitre.org/groups/G0092",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0093",
    "group": "GALLIUM",
    "url": "https://attack.mitre.org/groups/G0093",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0094",
    "group": "Kimsuky",
    "url": "https://attack.mitre.org/groups/G0094",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0095",
    "group": "Machete",
    "url": "https://attack.mitre.org/groups/G0095",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0096",
    "group": "APT41",
    "url": "https://attack.mitre.org/groups/G0096",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0097",
    "group": "Bouncing Golf",
    "url": "https://attack.mitre.org/groups/G0097",
    "domain": [
      "Mobile"
    ]
  },
  {
    "group_id": "G0098",
    "group": "BlackTech",
    "url": "https://attack.mitre.org/groups/G0098",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0099",
    "group": "APT-C-36",
    "url": "https://attack.mitre.org/groups/G0099",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0100",
    "group": "Inception",
    "url": "https://attack.mitre.org/groups/G0100",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0101",
    "group": "Frankenstein",
    "url": "https://attack.mitre.org/groups/G0101",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0102",
    "group": "Wizard Spider",
    "url": "https://attack.mitre.org/groups/G0102",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0103",
    "group": "Mofang",
    "url": "https://attack.mitre.org/groups/G0103",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0104",
    "group": "Sharpshooter",
    "url": "https://attack.mitre.org/groups/G0104",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0105",
    "group": "DarkVishnya",
    "url": "https://attack.mitre.org/groups/G0105",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0106",
    "group": "Rocke",
    "url": "https://attack.mitre.org/groups/G0106",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0107",
    "group": "Whitefly",
    "url": "https://attack.mitre.org/groups/G0107",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0108",
    "group": "Blue Mockingbird",
    "url": "https://attack.mitre.org/groups/G0108",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0112",
    "group": "Windshift",
    "url": "https://attack.mitre.org/groups/G0112",
    "domain": [
      "Enterprise",
      "Mobile"
    ]
  },
  {
    "group_id": "G0114",
    "group": "Chimera",
    "url": "https://attack.mitre.org/groups/G0114",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0115",
    "group": "GOLD SOUTHFIELD",
    "url": "https://attack.mitre.org/groups/G0115",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0116",
    "group": "Operation Wocao",
    "url": "https://attack.mitre.org/groups/G0116",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0117",
    "group": "Fox Kitten",
    "url": "https://attack.mitre.org/groups/G0117",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0119",
    "group": "Indrik Spider",
    "url": "https://attack.mitre.org/groups/G0119",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0120",
    "group": "Evilnum",
    "url": "https://attack.mitre.org/groups/G0120",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0121",
    "group": "Sidewinder",
    "url": "https://attack.mitre.org/groups/G0121",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0122",
    "group": "Silent Librarian",
    "url": "https://attack.mitre.org/groups/G0122",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0123",
    "group": "Volatile Cedar",
    "url": "https://attack.mitre.org/groups/G0123",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0124",
    "group": "Windigo",
    "url": "https://attack.mitre.org/groups/G0124",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0125",
    "group": "HAFNIUM",
    "url": "https://attack.mitre.org/groups/G0125",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0126",
    "group": "Higaisa",
    "url": "https://attack.mitre.org/groups/G0126",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0127",
    "group": "TA551",
    "url": "https://attack.mitre.org/groups/G0127",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0128",
    "group": "ZIRCONIUM",
    "url": "https://attack.mitre.org/groups/G0128",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0129",
    "group": "Mustang Panda",
    "url": "https://attack.mitre.org/groups/G0129",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0130",
    "group": "Ajax Security Team",
    "url": "https://attack.mitre.org/groups/G0130",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0131",
    "group": "Tonto Team",
    "url": "https://attack.mitre.org/groups/G0131",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0132",
    "group": "CostaRicto",
    "url": "https://attack.mitre.org/groups/G0132",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0133",
    "group": "Nomadic Octopus",
    "url": "https://attack.mitre.org/groups/G0133",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0134",
    "group": "Transparent Tribe",
    "url": "https://attack.mitre.org/groups/G0134",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0135",
    "group": "BackdoorDiplomacy",
    "url": "https://attack.mitre.org/groups/G0135",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0136",
    "group": "IndigoZebra",
    "url": "https://attack.mitre.org/groups/G0136",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0137",
    "group": "Ferocious Kitten",
    "url": "https://attack.mitre.org/groups/G0137",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0138",
    "group": "Andariel",
    "url": "https://attack.mitre.org/groups/G0138",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G0139",
    "group": "TeamTNT",
    "url": "https://attack.mitre.org/groups/G0139",
    "domain": [
      "Enterprise"
    ]
  },
  {
    "group_id": "G1000",
    "group": "ALLANITE",
    "url": "https://collaborate.mitre.org/attackics/index.php/Group/G0009",
    "domain": [
      "ICS"
    ]
  },
  {
    "group_id": "G1001",
    "group": "HEXANE",
    "url": "https://collaborate.mitre.org/attackics/index.php/Group/G0005",
    "domain": [
      "ICS"
    ]
  }
]