Skip to content

Threat actor

CSRA Inc

Last fetched

CSRA Inc is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

CSRA Inc. (formerly SRA International) is a subsidiary of General Dynamics that played a significant role in the U.S. government's immigration surveillance efforts. The company secured major contracts with the Department of Homeland Security (DHS) to operate the Visa Lifecycle Vetting Initiative (VLVI) program. Under these contracts, which ran from August 2018 through August 2023, CSRA was paid $42.1 million initially, with the total contract value ultimately reaching $101 million. The company's work involved analyzing and exploiting publicly available information, including media blogs, public hearings, conferences, and academic websites, using automated systems to monitor immigrants' social media and online presence.

Techniques by tactic

No ATT&CK techniques are recorded for CSRA Inc in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to CSRA Inc today — this states the absence of a published link, not that CSRA Inc has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from CSRA Inc into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.