MITRE ATT&CK Labeling of Cyber Threat Intelligence via LLM

This paper explores the effectiveness of various online and locally hosted LLMs in classifying an arbitrary statement as containing an MITRE ATT&CK Framework (MAF) technique or not and then producing the technique number if it does.

By

Terence O’Brien

January 7, 2025

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)

December 10, 2024

Top SANS Summit Talks of 2024

This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.

CLD - Blog - Why SEC545- GenAI and LLM Application Security__340 x 340.jpg

Artificial Intelligence (AI)

November 26, 2024

Why SEC545: GenAI and LLM Application Security?

SEC545: GenAI and LLM Application Security is designed to address the growing security challenges associated with generative artificial intelligence.

Ahmed Abugharbia

DFIR_-_Blog_-_How_AI_and_ML_are_Changing_Mobile_Device_Forensics_Investigations_340_x_340.jpg

Artificial Intelligence (AI)

How AI Forensics Is Transforming Mobile Device Investigations

One of the biggest challenges with AI comes with determining whether the artifact in question was generated by a human behind the keyboard or by AI.

Domenica Crognale