Ji-Min Lee

Multi-Strategy RAG With ATT&CK STIX Metadata-Enriched Embeddings for Technique Extraction

Extracting Tactics, Techniques, and Procedures (TTPs) from Cyber Threat Intelligence (CTI) reports and mapping them to the MITRE ATT&CK framework is a critical challenge in security operations. The abstract and compressed nature of ATT&CK technique descriptions makes automated mapping of attack techniques difficult. Ex...