witfoo/precinct6-cybersecurity
WitFoo Precinct6 Cybersecurity Dataset Version 2.1.0 (built 2026-09-22). Regenerated to address feedback from the University of Canterbury PIDS evaluation: attacks and normal traffic now share a timeline, usernames are wired into the provenance graph, mis-parsed timestamps are repaired, and every number in this card is generated from the uploaded data. Overview A large-scale, labeled cybersecurity dataset derived from production Security Operations Center (SOC)… See the full description on the dataset page: https://huggingface.co/datasets/witfoo/precinct6-cybersecurity.
Add files using upload-large-folder tool
Add files using upload-large-folder tool
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (10)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (9)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (8)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (7)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (6)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (5)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (4)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (3)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (2)
Remove files superseded by v2.1.0: duplicate incidents collapsed, year-rollover repair, one ORG token per organization, Disrupted is automated, MITRE techniques on suspicious rows (1)
Add files using upload-large-folder tool
Add files using upload-large-folder tool
v2.0.0: incidents in context, user edges, timestamp repair