APTGen: An Approach towards Generating Practical Dataset Labelled with Targeted...

on YouTube ↗13m

" summary

Claims a pipeline that top‑down generates targeted attack traces by mapping eight real incident reports to MITRE ATT&CK techniques, automatically instantiating and executing corresponding attack tools to produce host and network logs, and publishing 800 labeled sequences and logs for reuse. It actually runs real exploit/tool chains rather than simulating events, exposes parameterized constraints (tactic/technique selection, concurrency) and admits limits in realism, coverage and artifact dependencies such as USB or vendor tooling. MITRE ATT&CK mapping and executes real tools are core.

AI-written summary · about

" chapters (6)

1. 0:00Introduction to APTGen
2. 2:09Cybersecurity data challenges
3. 5:08APTGen approach
4. 8:06Dataset generation methods
5. 10:39Results and applications
6. 12:38Future directions & Q&A

" related talks

• 31mAdversary Emulation: Generating MITRE ATT&CK Technique SequencesMartin Eian · 33rd Annual FIRST Conference (Virtual Event)
• 01h 47mMITRE ATT&CK FundamentalsSean Whitley · FIRST & AfricaCERT Virtual Symposium for the African and Arab Regions 2021
• 48mMITRE ATT&CK: The Play at Home EditionRyan Kovar, Katie Nickels · Black Hat USA 2019
• 38mSightings Ecosystem: A Data-driven Analysis of ATT&CK in the WildKellyn Wagner Ramsdell, Mike Cunningham · 34th Annual FIRST Conference 2022
• 58mMITRE ATT&CK for DevelopersChris Ayers · NDC Security 2026
• 31mDon't Boil the Ocean: Using MITRE ATT&CK to Guide Hunting ActivityJohn Stoner · BSidesSF 2019
• 39mThe PR3TACK Initiative: Building the World’s First Preemptive Tactics & Countermeasures KnowledgebasVishal Thakur, David Wearing, Niels Heijmans · FIRST Conference 2026 (FIRSTCON26)
• 38mAdversary Detection Pipelines: Finally Making Your Threat Intel UsefulXena Olsen · Black Hat Asia 2020