← Feed
@nopatience@swecyb.com
Post #762917
2026-03-20 13:01 UTC
Oh, exciting progress on my new processing/analytical "engine".
I've built a system to break down complex processing and analytical jobs into more "atomic" tasks.
These tasks are defined as simple JSON-data structures and can then be sent to an LLM-engine of choice.
For example one thing I often do when reading articles it to try and figure out which entities are the attackers and victims. Then I tag this in order to be able to quickly understand context of a mentioned threat actor etc.
This engine allows me to do this automatically with a better than I hoped for accuracy.
Entities like countriese, cities, places, people, groups, and actors are all classified as attackers, victims or neutral.
This contributes to significant speed-up in my analytical work because I don't have to spend time tagging and otherwise identifying these "obvious" but very time consuming tasks.
This is so much fun!
Replies (1)
-
That is obviously one of many "atomic" tasks to perform. Another is to simply extract and classify threat actors according to STIX naming conventions of actor_type.
All of this is trivial, but very time consuming. But having all the data appropriately tagged and indexed makes for some very real and tangible benefits when going down an analytical rabbit hole.
It speeds up the process significantly without sacrificing quality. Each classification comes with a justification and "evidence" so that as an analyst it's real easy for me to quickly understand if I agree with (or not) the assessment/classification.
Productivity boost for sure.
Anyways. I'm all hyped up about this and the possibilities it creates for me.
Open ##1421944