As cyber attacks become more organised, identifying attacker groups is critical. We research threat intelligence and actor analysis, including dark web intelligence extraction, authorship attribution of Japanese web posts, and social bot investigation.