Future Updates
We are committed to continually enhancing and expanding the SAGA dataset. Future versions will include updates to existing scenarios as well as the addition of new attack scenarios that reflect the evolving landscape of cyber threats. These updates will incorporate the latest cyber threat intelligence, advancements in attack simulation techniques, and insights from ongoing cybersecurity research.
Released Dataset
- SAGA dataset - v2.0
This version of the dataset includes three types of attack scenarios, designed to support cybersecurity research focused on Advanced Persistent Threats (APTs):
- Known APT Campaigns: These scenarios are based on cyber threat intelligence reports from real-world APT activities, accurately replicating documented attack techniques and lifecycles.
- Generated APT Campaigns: Using SAGA's random generation capability, these scenarios simulate realistic APT attacks, producing novel yet highly plausible attack patterns.
- Composite APT Campaigns: These scenarios are created by randomly combining three scenarios from the previous two categories, reflecting more complex, multi-layered real-world attack situations and showcasing the interaction of various attack techniques and strategies.
- SAGA dataset - v1.0
This version of the dataset focuses exclusively on Known APT Campaigns, which are based on real-world cyber threat intelligence reports. It includes scenarios that accurately replicate documented APT activities, reflecting the attack techniques and lifecycles used by advanced persistent threat (APT) actors. The dataset provides detailed records of tactics, techniques, and procedures (TTPs), offering valuable insights into the nature of APT campaigns and their progression over time.