Researchers have developed AHLERT, a novel system designed to automatically generate actionable threat hunting leads from Cyber Threat Intelligence (CTI) reports. Unlike previous methods that focus solely on entities or analyze reports in isolation, AHLERT employs a hybrid retrieval system combining vector search with knowledge graph traversal, specifically leveraging the MITRE ATT&CK framework. The system also incorporates an ontology-grounding retrieval-augmented generation method to ensure leads are relevant to a defender's specific operational environment and assets. Evaluations show AHLERT significantly improves the extraction of evidence-grounded leads, doubling the mean F1 score and outperforming off-the-shelf LLM models in effectiveness. AI
IMPACT Enhances cybersecurity threat intelligence analysis by automating the generation of actionable hunt leads.
RANK_REASON The item is a research paper detailing a new system and its evaluation. [lever_c_demoted from research: ic=1 ai=1.0]
- AHLERT
- alphaXiv
- arXiv
- CatalyzeX
- Connected Papers
- CORE Recommender
- Cyber Threat Intelligence
- DagsHub
- Gotit.pub
- Hugging Face
- Litmaps
- MITRE ATT&CK
- ScienceCast
- scite Smart Citations
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
