Aperçu
WithSecure attribution connector that assesses the best-matching intrusion sets for an OpenCTI incident, trained on intrusion-set data to provide automated campaign attribution.
The attribution tools connector developed by WithSecure provides incident attribution capability for OpenCTI. The tool is trained from OpenCTI intrusion-set data and can be launched as an enrichment for OpenCTI incidents. The tool will assess the best matching intrusion-sets for the incident based on the collection of related objects within it.