Fig. 10
From: TriCTI: an actionable cyber threat intelligence discovery system via trigger-enhanced neural network
The re-verification (using the VirusTotal analysis) for IOCs that are not able to be verified the campaign stages through Relationships. Note: Not found is a fraction of IOCs that are not found in VT, Not det. indicates that the IOCs are found in VT but none of the antivirus scanners mark it as malicious, and Detected represents the number of the IOCs that are found in VT and are labeled malicious by at least one antivirus scanners