From acc6ada575e59774335ee6977866760ed5ace0c5 Mon Sep 17 00:00:00 2001
From: Mathieu Beligon <mathieu@feedly.com>
Date: Tue, 26 Jul 2022 23:23:57 -0700
Subject: [PATCH] r0ny123.review: Use Cutting Kitten as main value for
 ITSecTeam

---
 clusters/threat-actor.json | 15 ++++-----------
 1 file changed, 4 insertions(+), 11 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2926e037..bf0c65b4 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2135,7 +2135,6 @@
           "Alibaba",
           "TG-2889",
           "Cobalt Gypsy",
-          "Cutting Kitten",
           "G0003"
         ]
       },
@@ -9582,19 +9581,13 @@
         "refs": [
           "https://www.cfr.org/interactive/cyber-operations/itsecteam",
           "https://www.justice.gov/usao-sdny/file/835061/download"
+        ],
+        "synonyms": [
+          "ITsecTeam"
         ]
       },
-      "related": [
-        {
-          "dest-uuid": "86724806-7ec9-4a48-a0a7-ecbde3bf4810",
-          "tags": [
-            "estimative-language:likelihood-probability=\"likely\""
-          ],
-          "type": "linked-to"
-        }
-      ],
       "uuid": "7a3f505b-10e9-4177-a96f-d476b55fd3dd",
-      "value": "ITSecTeam"
+      "value": "CUTTING KITTEN"
     },
     {
       "description": "Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.",