Tootfinder

Reading a preprint paper on threat intelligence dated December 2025, and it claims that MISP uses an XML format and that OpenIOC is still commonly used.
I’m guessing they relied on an LLM trained on a 2014-era dataset.
#cti #paper