CICAPT-IIoT

The 'CICAPT-IIoT' dataset is a multi-source log dataset that contains system, network, and browser activity from 870 sessions (70 attack and 800 benign) and is used to evaluate machine learning methods for detecting multi-stage cyberattacks with detailed ATT&CK technique labeling.

Papers using CICAPT-IIoT (1)

Multi-Source Cybersecurity Logs: An ATT&CK-Labeled Dataset and SLM Evaluation2026