From: TIM: threat context-enhanced TTP intelligence mining on unstructured threat data
TTPs | Pos-hit | Neg-hit | Accuracy |
---|---|---|---|
Phishing | 0.91 | 0.17 | 0.873 |
Scheduled Task/Job | 0.988 | 0.22 | 0.884 |
Obfuscated Files or Information | 0.902 | 0.529 | 0.6865 |
Deobfuscate/Decode Files or Information | 0.92 | 0.33 | 0.795 |
Collection | 0.879 | 0.351 | 0.764 |
Application Layer Protocol | 0.945 | 0.102 | 0.9215 |
Average | 0.925 | 0.283 | 0.820 |