Open access
2026
Multi-Strategy RAG With ATT&CK STIX Metadata-Enriched Embeddings for Technique Extraction
Extracting Tactics, Techniques, and Procedures (TTPs) from Cyber Threat Intelligence (CTI) reports and mapping them to the MITRE ATT&CK framework is a critical challenge in security operations. The abstract and compressed nature of ATT&CK technique descriptions makes automated mapping of attack techniques difficult. Ex...
Ji-Min Lee, K. Kim, Kwonmoo You et al.
· IEEE Access · 0 citations