DeceptionPro/EDR_Telemetry_Sample

This dataset contains raw Endpoint Detection & Response (EDR) telemetry captured during controlled Deception.Pro malware sandbox operations on an enterprise Active Directory network. Unlike most malware sandboxes — which detonate samples for roughly 30 minutes — our operations run for hours or days per analysis, capturing the full arc of adversary behavior. The data represents a full-fidelity snapshot of system activity recorded while threat actors interacted with a live deception environment… See the full description on the dataset page: https://huggingface.co/datasets/DeceptionPro/EDR_Telemetry_Sample.