TTP-R1: RL-Driven ATT&CK Technique Extraction from CTI Text

Mon, 10 Aug 2026 13:39:41 +0000

Engineer — Skip
SOC/IR — Learn: TTP-R1 automates mapping CTI prose to ATT&CK (sub-)techniques with meaningful F1 gains over LLM baselines; worth tracking if your team annotates CTI at scale, but no detection or hunt action follows from this research paper alone.
Leader — Skip

Mitre-Attack on CuraSec