From 2978bf073d26844a7e3ac9fa578a86685466a4d4 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 7 Mar 2016 21:17:56 +0100
Subject: [PATCH] Additional IR operation added

---
 elements/adversary-groups.json | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index d965092..b1201c4 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -435,6 +435,16 @@
       "description": "An established group of cyber attackers based in Iran, who carried on several campaigns in 2013, including a series of attacks targeting political dissidents and those supporting Iranian political opposition.",
       "group": "Magic Kitten"
     },
+    {
+      "country": "IR",
+      "synonyms": [
+        "Operation Cleaver"
+      ],
+      "refs": [
+        "http://cdn2.hubspot.net/hubfs/270968/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf"
+      ],
+      "group": "Cleaver"
+    },
     {
       "country": "TN",
       "synonyms": [
@@ -613,7 +623,6 @@
         "Animal Farm"
       ]
     },
-
     {
       "synonyms": [
         "SyrianElectronicArmy",