TTPXHunter-Actionable-Threat-Intelligence-Extraction-as-TTPs-from-Finished-Cyber-Threat-Reports

This repo contains code and dataset of our paper titled "TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports". The paper is available at: https://dl.acm.org/doi/abs/10.1145/3579375.3579391

Run the Jupyter notebook TTPXHunter.ipynb

The notebook will download the model directly from Huggingface. Model is available at: https://huggingface.co/nanda-rani/TTPXHunter

Note:

If you are using content of this repository in any capacity, kindly cite this work.

Nanda Rani, Bikash Saha, Vikas Maurya, and Sandeep Kumar Shukla. 2024. TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports. Digital Threats Just Accepted (September 2024). https://doi.org/10.1145/3696427

Connected Research

• TTPXHunter builds upon a previous research effort titled "TTPHunter: Automated Extraction of Actionable Intelligence as TTPs from Narrative Threat Reports." The paper can be accessed at this link. The dataset, model, and inference code are available on GitHub at this repository.