432 citations · 520 across the 17 of their papers we have counts for
3 papers · 1 filter
Automated Rule Mutation for Emerging Attack Variants using Infrastructure-Aware Technique Proximity
Sepehr Ghaffarzadegan, Boubakr Nour, Makan Pourzandi +2
Detection rules are typically crafted based on specific observations of an attack. While these rules are effective for particular attack instances, their coverage diminishes when a…
Evidence-Grounded Retrieval for Investigation Hunt Lead Generation from CTI Reports
Akash Prakash, Boubakr Nour, Makan Pourzandi +2
Threat hunting increasingly depends on converting unstructured knowledge (e.g., Cyber Threat Intelligence reports) into actionable hunt leads: concise, investigable hypotheses grou…
From Threat Intelligence to Detection: Knowledge-driven Enrichment and Template-based Rule Grounding for Automated Sigma Rule Generation
Sepehr Ghaffarzadegan, Boubakr Nour, Makan Pourzandi +2
Mechanisms for dynamically converting cyber threat intelligence (CTI) into actionable detection capabilities are necessary due to the rapid evolution of Advanced Persistent Threats…