Fig. 4
From: TriCTI: an actionable cyber threat intelligence discovery system via trigger-enhanced neural network

An example of Delivery campaign stage. The red font represents the IOC, and the blue font is the campaign trigger
From: TriCTI: an actionable cyber threat intelligence discovery system via trigger-enhanced neural network
An example of Delivery campaign stage. The red font represents the IOC, and the blue font is the campaign trigger