Fig. 6
From: TriCTI: an actionable cyber threat intelligence discovery system via trigger-enhanced neural network
The demonstration of the trigger-enhanced campaign stages classification model. \(r_{t_k}\) is the most similar trigger vector to final sentence vector \(r_s\), which is highly explanatory for the campaign stage. The final input of the model is: the type features of the IOCs \(IOC_{feature}\), weighted hidden representation \(H_l'\), and \(H_p\). Note: the original value of “$URL$” is “http://5.79.66.241/index.html”