How to Use LLMs to Augment Threat Alerts with the MITRE Framework

Learn a technique for automatically associating complex malicious activity with MITRE TTPs to accelerate cybersecurity investigations in this 15-minute conference talk from RSA Conference. Senior Data Scientist Nakkul Khuraana and Lead Data Scientist Hari Manassery Koduvely from OpenText demonstrate how to link analytical outputs with relevant MITRE TTPs using an enhanced RAG method with Large Language Models. Discover how numerous cybersecurity signals can be effectively summarized and mapped to specific MITRE TTPs, improving both the speed and accuracy of threat analysis.