Table 7 The positive and negative sample number of six TTPs
From: TIM: threat context-enhanced TTP intelligence mining on unstructured threat data
TTPs | Positive Samples | Negative: Non TTPs Samples | Negative: Other TTPs Samples |
|---|---|---|---|
Phishing | 2599 | 2599 | 3462 |
Scheduled Task/Job | 451 | 451 | 5610 |
Obfuscated Files or Information | 439 | 439 | 5622 |
Deobfuscate/Decode Files or Information | 475 | 475 | 5586 |
Collection | 1401 | 1401 | 4660 |
Application Layer Protocol | 696 | 696 | 5365 |