CuraSec

tag: Mitre-Attack · 1 items

Learn archived TTP-R1: RL-Driven ATT&CK Technique Extraction from CTI Text
2026-08-10 · arXiv cs.CR · source ↗ #threat-intelligence#mitre-attack#machine-learning
  • Engineer — Skip
  • SOC/IR — Learn: TTP-R1 automates mapping CTI prose to ATT&CK (sub-)techniques with meaningful F1 gains over LLM baselines; worth tracking if your team annotates CTI at scale, but no detection or hunt action follows from this research paper alone.
  • Leader — Skip