{"id":1753,"date":"2025-03-30T10:30:00","date_gmt":"2025-03-30T10:30:00","guid":{"rendered":"https:\/\/abstractionslab.com\/?p=1753"},"modified":"2026-03-16T17:04:31","modified_gmt":"2026-03-16T17:04:31","slug":"alpha-release-of-satrap-dl","status":"publish","type":"post","link":"https:\/\/abstractionslab.com\/index.php\/2025\/03\/30\/alpha-release-of-satrap-dl\/","title":{"rendered":"Alpha Release of SATRAP-DL on 30 March 2025"},"content":{"rendered":"\n

We have released the Alpha version of SATRAP on GitHub<\/mark><\/strong><\/a>!<\/p>\n\n\n\n

\"SATRAP<\/figure>\n\n\n\n

What is SATRAP<\/mark><\/a>?<\/h2>\n\n\n\n

Developed in the context of the SATRAP-DL subproject of CyFORT<\/a>, SATRAP<\/strong> (Semi-Automated Threat Reconnaissance and Analysis Platform) is an open-source, cross-platform software for computer-aided analysis of Cyber Threat Intelligence (CTI) through automated reasoning.<\/p>\n\n\n\n

key features<\/h2>\n\n\n\n
\n
<\/path><\/svg><\/span>Knowledge Representation System<\/strong> for Cyber Threat Intelligence implemented on top of TypeDB.<\/a><\/a><\/span><\/div>\n\n\n\n
<\/path><\/svg><\/span>Automated Reasoning<\/strong>: Apply predefined deduction rules to derive new knowledge from existing CTI data.<\/span><\/div>\n\n\n\n
<\/path><\/svg><\/span>STIX 2.1 Data Model<\/strong>: Leverage a widely adopted standard for representing and dealing with CTI information.<\/span><\/div>\n\n\n\n
<\/path><\/svg><\/span>ETL Mechanism<\/strong>: Ingest STIX 2.1-compliant data from CTI sources into the knowledge base.<\/span><\/div>\n\n\n\n
<\/path><\/svg><\/span>Predefined Analytic Functions<\/strong>: Perform automated CTI analysis tasks, such as inferring techniques and tools

used by threat actors.<\/span><\/div>\n\n\n\n
<\/path><\/svg><\/span>Extensibility<\/strong>: Add custom inference rules and queries to tailor SATRAP to your specific needs.<\/span><\/div>\n<\/div><\/div>\n\n\n\n

How does SATRAP Automate Analytic Tasks?<\/h2>\n\n\n\n

At the core, SATRAP relies on a Knowledge Representation System (KRS)<\/strong> to introduce semantics into the storage, processing, and analysis of cyber threat intelligence. This approach allows SATRAP to automate analytic tasks on large volumes of threat information and CTI via the logical derivation of knowledge.<\/p>\n\n\n\n

The KRS consists of:<\/p>\n\n\n\n