Question about the darpa dataset

[kamelferrahi]

Hi how did you get the documentation on the darpa dataset n order to know which file contains the malicious or benign activity

[Jimmyokok]

Three ways:

1. Traverse every file and find those activities.
2. Traverse the head of each file, extract the timestamp and see if it is inside the time range of an attack campaign.
3. See which file(s) did previous works use via their papers/github repos.

[kamelferrahi]

Thank you for you guidance. Where Can I find the planning of the attack campaign

[Jimmyokok]

There is a ground truth document(TC_Ground_Truth_Report_E3_Update.pdf) officially provided with the data release. It contains when the attack campaigns took place.

[kamelferrahi]

Thank You!