A naming convention is a standard format for assigning consistent labels to people, systems, malware families, threat actors, or events. In cyber security, good naming reduces confusion when multiple teams, tools, and reports refer to the same activity with different aliases. It helps analysts search logs, correlate alerts, and track trends without guessing whether two labels describe the same threat.
In real defense work, naming conventions appear in threat intelligence databases, incident tickets, detection rules, and malware catalogs. A shared format can group related activity into a cluster or family, while leaving room for uncertainty about attribution. That matters because a name is not proof of identity; it is an organizing tool. Clear conventions improve communication during triage and reporting, while inconsistent names can fragment intelligence and slow response. In attacks, adversaries sometimes exploit naming confusion by reusing tools or infrastructure under new labels, making disciplined classification even more important.