extract threat actor from particular event

[helloworld104]

hi, i am looking to perform some kind of automation to go through multiple events, and extract the name of the threat actors (if the events have relevant information). what would be a good way to do this?

[Rafiot]

What is the search criteria? Do you want to iterate over all the events and get the threat actor?

[helloworld104]

not necessarily all, but my main focus is to extract the threat actors for events that have associated threat actors