Threat actor

Concept

A person or group carrying out cyberattacks; Microsoft tracks threat actors in profiles and names them by weather-themed families, using temporary Storm labels for groups still in development.

Title graphic: Threat actor (Concept)

Type	Concept

Articles about Threat actor (3)

Sign-In Risk vs. User Risk in Microsoft Entra ID: What is the Difference?
2026-10-26 · Mirko Peters
Learn the critical differences between sign-in risk and user risk in Microsoft Entra ID Protection and how to configure conditional access properly.
Microsoft Threat Actor Naming Convention: Decoding Typhoon, Blizzard, and Storm
2026-10-24 · Mirko Peters
Learn how Microsoft names cyber threat actors using Typhoon, Blizzard, and Storm labels. Understand adversary motives and origins easily.
Why You Can't Afford to Ignore Microsoft 365 Audit Logs
2026-08-28 · Mirko Peters
Welcome to our deep dive into one of the most critical, yet frequently overlooked, pillars of enterprise cybersecurity: Microsoft 365 audit logs. If your organizati…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Feed for this topic (RSS): entity/threat-actor/feed.xml
Articles on this topic: 3

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03