To run LLM-Cloud-Hunter, use the main.py file. Add url's of new OSCTI to the urls list
if __name__ == '__main__':
urls = []
urls.append('https://sysdig.com/blog/cloud-breach-terraform-data-theft/')In the folder output, using the name of the OSCTI,
If you use this repository, please cite it using the following DOI:
For citing the artifact, use:
@article{schwartz2024llmcloudhunter,
title={Llmcloudhunter: Harnessing llms for automated extraction of detection rules from cloud-based cti},
author={Schwartz, Yuval and Benshimol, Lavi and Mimran, Dudu and Elovici, Yuval and Shabtai, Asaf},
journal={arXiv preprint arXiv:2407.05194},
year={2024}
}