Updated python for identifying a threat actor group idiom