Datasetpublic

AriaAICompany/threat-intel-reports

ThreatIntel synthetic reports 32 synthetic English and Persian CTI notes for the ThreatIntel extraction demo. Seed 5. Organization dataset and collection item are public. Live Gradio (AriaAICompany/threat-intel or alirezaaminzadeh/threat-intel) is created by scripts/publish.py after the daily Space-creation cap resets. This is fixture data (level 1). It does not prove operational extraction quality on real vendor reports. Reports are original laboratory text. They are not copies… See the full description on the dataset page: https://huggingface.co/datasets/AriaAICompany/threat-intel-reports.

sourceHugging Facecc-by-4.0updated 2d agoView on Hugging Face

0likes84downloads

Dataset Card

ThreatIntel synthetic reports

32 synthetic English and Persian CTI notes for the ThreatIntel extraction demo. Seed 5.

Organization dataset and collection item are public. Live Gradio (AriaAICompany/threat-intel or alirezaaminzadeh/threat-intel) is created by scripts/publish.py after the daily Space-creation cap resets. This is fixture data (level 1). It does not prove operational extraction quality on real vendor reports. Reports are original laboratory text. They are not copies of copyrighted advisories.

Product: ThreatIntel · Collection: Aria AI — Cybersecurity · Site: aria-ai.ir

Files

—data/reports.jsonl
—data/reports/*.md
—data/splits.json
—data/schema.json
—data/protocol.md
—data/evaluation.json
—data/sample_preview.json

Splits

Split is by campaign, not random sentences of the same note.

—development: 5 campaigns × 4 variants = 20
—test: 3 campaigns × 4 variants = 12
—interactive: six *-00 fixtures used in the Space

Observed-intel, vendor-advisory hard negatives, brand-mention hard negatives, and insufficient fragments are all present.

Labels

—claim_kind: observed, quote, author_recommendation, unknown
—victim_status: brand mention defaults to not_asserted
—ATT&CK gold IDs are mapped only when a behavior phrase exists
—Rejected tokens such as CVE-99-1 must not be extracted

Held-out evaluation (12 test reports)

Method	Precision	Recall	Notes
regex-ioc baseline	1.00	0.50	IOC shape only
gazetteer + relations	1.00	1.00	citation accuracy 1.00
ATT&CK snapshot map	1.00	1.00	behavior phrase required

Ungrounded IOC ratio 0. Fabricated IDs kept 0. Brand-as-victim rate 0. Lab scores are not operational CTI accuracy.

Recorded sample silverwave_loader_en-00: workflow needs_review (actor attribution stays uncertain), hash bef7faefd601d65d, 7 entities, 6 cited relations.

Persian

سی‌و‌دو گزارش مصنوعی فارسی و انگلیسی برای استخراج شاخص و رابطه. تقسیم بر کمپین است. اعتبار شکلی بدخواهی نیست. نام برند قربانی نیست.

License

CC-BY-4.0 for the synthetic text. ATT&CK technique names in the lab snapshot are from MITRE ATT&CK (CC-BY). Keep the synthetic-data label. Do not treat documentation IPs or .example hosts as live infrastructure.