INTEL_REPORT
arXiv — Cryptography & Security (cs.CR) · published 6/18/2026, 4:00:00 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
TGCM: Topic-Guided Generative Disentanglement of Interleaved APT Technique Sequences arXiv:2606.18651v1 Announce Type: new Abstract: In enterprise environments, multiple Advanced Persistent Threat (APT) campaigns often unfold concurrently, producing audit logs in which attack techniques across actors (sources) are interleaved over time. This setting naturally gives rise to an Unknown-K Interleaved Sequence Demixing (UKISD) problem: recovering multiple latent campaigns from a…
https://arxiv.org/abs/2606.18651
sha256:c7189628cd8d1a72f4901cd556d88d1408971264b175b886794a5e6b9415bf21
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
No indicators linked for this report.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.