The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
SAGA: Synthetic Audit Log Generation for APT Campaigns
- Published
- Record updated
Summary
The paper introduces SAGA, an approach for generating fine-grained, labeled synthetic audit logs that mimic real system logs while embedding APT attacks. Malicious events follow the MITRE ATT&CK framework across an APT lifecycle and are blended with benign operational logs over configurable durations. The authors use these datasets to run baseline event-based technique hunting and campaign detection, and show that a deep learning model trained on them can detect previously unseen techniques.