Classifying Cybersecurity Incidents with Kill Chain Graphs

Created using ChatSlide

This presentation provides a comprehensive overview of a research paper focused on cybersecurity incident management. It covers the context of alert fatigue in Security Operations Centers (SOCs) and introduces theoretical foundations such as incident triage and the MITRE ATT&CK framework. The methodology includes the architecture of the CTS Analyzer, addressing alert overload and incident severity classification. Experimental results demonstrate effective path matching with high accuracy....