Botnet Infrastructure and Activity Association Analysis Q&A Dataset
- Records
- 4700
- Size
- 0.4GB
- Format
- JSON
- Provider
MOBIUSI INC- Updated
- v1.02026-11-04
This dataset focuses on infrastructure clues in threat reports, including domains, IP addresses, hosting environments, and network services, paired with analytical questions and evidence-based explanatory answers about their links to botnet activity. Its content emphasizes evidence synthesis, calibrated assessment of association strength, and attribution limitations, teaching models to distinguish direct reporting from analytical inference rather than treating a single indicator as conclusive attribution. It supports cyber threat intelligence analysis, security operations, and domain-specific supervised fine-tuning; sample counts and other dataset size details are not provided.
Overview
Dataset Insights
Preview
Sample Examples
Schema
Technical Specifications
| Field | Type | Description |
|---|---|---|
| file_name | string | File name |
| answer | string | A detailed, evidence-grounded answer that synthesizes infrastructure clues and campaign context, assesses the strength of the association, and avoids treating an individual indicator as conclusive attribution. |
| question | string | An analytical question about how infrastructure clues relate to a botnet campaign or its activity. |
| campaign_assessment | string | A calibrated assessment of the relationship between the infrastructure and botnet activity, distinguishing direct reporting from analytical inference. |
| defensive_relevance | string | Defensive investigation and monitoring considerations that follow from the assessment without overstating certainty. |
| supporting_evidence | string | Observations and analytical reasoning that support or weaken a connection between the infrastructure and the suspected botnet campaign. |
| infrastructure_clues | string | Relevant infrastructure indicators and their reported or inferred roles, such as domains, IP addresses, hosting, or network services. |
| source_report_excerpt | string | The threat report passage or source material used as evidence for the analysis. |
| attribution_limitations | string | Caveats, alternative explanations, data gaps, and other constraints that prevent infrastructure clues from proving campaign ownership or attribution on their own. |
Trust
Compliance Statement
Authorization Type
Proprietary - Commercial AI Training License (No Redistribution)
Commercial Use
Requires exclusive subscription or authorization contract (monthly or per-invocation charging)
Privacy and Anonymization
No PII, no real company names, simulated scenarios follow industry standards
Compliance System
Compliant with China's Data Security Law / EU GDPR / supports enterprise data access logs
FAQ
Frequently Asked Questions
- What does the dataset contain?
- Examples examine links between infrastructure clues in threat reports and botnet activity. Fields include a source excerpt, an analytical question, an explanatory answer, relevant clues, supporting evidence, an association assessment, attribution limitations, and defensive considerations.
- How does the dataset represent confidence and limitations?
- Answers are grounded in report material and explicit reasoning, distinguish direct reporting from analytical inference, and note alternative explanations, data gaps, and other attribution constraints. A single domain, IP address, or service indicator is not treated as proof of campaign ownership.
- Which training and application scenarios does it support?
- The data supports cyber threat intelligence Q&A, long-form evidence synthesis, botnet activity analysis, and defensive investigation. It can be used for domain-specific supervised fine-tuning and evaluation of related capabilities.
- How can the data be obtained, and what are the licensing terms?
- Please consult the dataset listing or the provider's official documentation for access methods and licensing terms. Before use, verify the license, redistribution restrictions, and any citation or usage requirements for the source threat reports.
Can't find the data you need?
Post a request and let data providers reach out to you.
Get this Dataset
High-quality data, ready for your next AI breakthrough.
Cite this Work
@dataset{Mobiusi2026,
title={Botnet Infrastructure and Activity Association Analysis Q&A Dataset},
author={MOBIUSI INC},
year={2026},
url={https://www.mobiusi.com/datasets/626f6fe9981e98415bdb6666b3b63903?dataset_scene_id=10},
urldate={2026-10-26},
keywords={botnet dataset,cyber threat intelligence,infrastructure association analysis,threat report Q&A,cybersecurity domain SFT,botnet activity analysis,evidence-based reasoning,cybersecurity training data},
version={1.0}
}Using this in research? Please cite us.