Question

A SOC lead is overwhelmed by the volume of unstructured threat intelligence reports, vendor advisories, and dark web forum posts arriving daily. She wants an AI-powered analytic technique that can automatically read this free-form text, extract key indicators and threat actor mentions, and produce concise summaries so analysts can triage faster. Which AI/ML technique best meets this specific need?

Accepted Answer

Natural language processing (NLP) with named-entity recognition and text summarization

Answer

Time-series regression forecasting on historical alert counts

Answer

Unsupervised clustering of NetFlow records by byte volume

Answer

Supervised binary classification trained on labeled malware hashes