Improved capitalization on state-sponsored threat actors (APT)