added support for revised threat actor columns in top level table

this is in support of issue #17