MITRE ATT&CK Driven Threat Hunting Automated by Local LLM
Автор: MITRE Center for Threat-Informed Defense
Загружено: 2025-04-01
Просмотров: 775
Описание:
Speakers:
Jun Miura, Researcher, Fujitsu Defense & National Security Limited
Toshitaka Satomi, Researcher, Fujitsu Defense & National Security Limited
Eri Miura, Fujitsu Defense & National Security Limited
Threat hunting is a proactive approach for identifying undetected threats within an organization’s environment, and there are various proposed ways to perform. In this presentation, based on the concept of Summiting the Pyramid, MITRE ATT&CK driven threat hunting is proposed. One of the goals of the threat hunting is to automatically generate Sigma rules for hunting particular TTPs in MITRE ATT&CK, which is achieved by Large Language Model (LLM) and Retrieval-Augmented Generation (RAG). The speaker provides the results, know-how and tips obtained by developing the application in the presentation.
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
