Dataset · Hugging Face

witfoo/precinct6-cybersecurity

Name: precinct6-cybersecurity
Creator: witfoo
License: apache-2.0
Keywords: task_categories:text-classification, task_categories:graph-ml, language:en, license:apache-2.0, size_categories:1M<n<10M, region:us, cybersecurity, intrusion-detection, provenance-graphs, MITRE-ATT&CK, SOAR, security-operations, IDS, network-security, threat-detection

WitFoo Precinct6 Cybersecurity Dataset Version 2.1.0 (built 2026-09-22). Regenerated to address feedback from the University of Canterbury PIDS evaluation: attacks and normal traffic now share a timeline, usernames are wired into the provenance graph, mis-parsed timestamps are repaired, and every number in this card is generated from the uploaded data. Overview A large-scale, labeled cybersecurity dataset derived from production Security Operations Center (SOC)… See the full description on the dataset page: https://huggingface.co/datasets/witfoo/precinct6-cybersecurity.

View on Hugging FaceReport an issue

Author / organization	witfoo
License (as declared)	apache-2.0
Downloads	3.8K (as reported by Hugging Face)
Likes	69
Created	21 March 2026
Last updated at source	22 September 2026

cybersecurityintrusion-detectionprovenance-graphsMITRE-ATT&CKSOARsecurity-operationsIDSnetwork-securitythreat-detectionlabeled-datasetlead-rules

Embed this entry

<iframe src="https://silytics.si/embed/item/85a336a3-0408-4884-a1e0-bbf79d181b53" width="420" height="190" style="border:0" loading="lazy" title="Silytics entry"></iframe>

Free, no tracking. More about feeds and embeds.

More from witfoo

witfoo/precinct6-cybersecurity-100mDataset
witfoo/syslog-to-artifactDataset

Silytics shows public metadata from Hugging Face and links to the original. Information may be incomplete or out of date. Last refreshed 16 October 2026. Licenses and terms of the original apply to the work itself. Not financial, legal or professional advice.