Added python sample for identifying a threat actor group idiom