Vulnhalla

Vulnhalla Automated CodeQL Analysis with LLM Classification For a detailed overview of the research and motivation behind Vulnhalla, see the official CyberArk Threat Research blog post: Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhalla automates the complete security...

SAFE

SAFE SAFE выполняет контролируемую, учитывающую особенности репозитория оценку безопасности результатов Semgrep и Trivy в исследовательских артефактах. Он поддерживает две независимые задачи классификации: прямое бинарное предсказание SECURITYRELEVANT или NONSECURITY и детальную мультиклассовую...

TagZilla: Automated Owner and Abuse Type Tagging for Indicators of Compromise in Threat Reports

Cyber Threat Intelligence CTI reports often describe Indicators of Compromise IoCs such as IP addresses, URLs, file hashes, and cryptocurrency wallets involved in cyberattacks. Those IoCs are typically described in the unstructured report's text, or listed at the end of the report with little...