EnterpriseDataset

Fenrir Cybersecurity Intelligence Corpus

The Fenrir Cybersecurity Intelligence Corpus is a premier, enterprise-grade cybersecurity dataset containing high-fidelity threat logs, network traffic anomalies, and modern attack signatures. It is the essential foundational data for training next-generation intrusion detection systems (IDS) and autonomous security operations center (SOC) agents. This data is far more realistic, hostile, and current than the outdated, academic network datasets that fail to capture the sophistication of modern adversarial tactics.

Overview

As cyber threats evolve into automated, polymorphic attacks, defensive AI must be trained on the bleeding edge of threat intelligence. Our dataset captures the complex realities of modern attack vectors, including zero-day anomalies, sophisticated DDoS patterns, and lateral movement within enterprise networks. By integrating this corpus, your security infrastructure can transition from reactive rule-based flagging to proactive, AI-driven threat hunting, capable of identifying malicious intent hidden within millions of benign network packets.

Key highlights

Captures highly sophisticated modern attack vectors, including zero-day anomalies, ransomware staging, and complex DDoS patterns.
Richly structured, high-volume network packet data combined with corresponding system event logs for full context.
Accelerates the development of automated, AI-driven threat-hunting agents and autonomous SOC workflows.
Includes highly stealthy, low-and-slow attack signatures that bypass traditional, rule-based firewall systems.
Strictly categorized using the MITRE ATT&CK framework to ensure industry-standard threat mapping.

Technical specifications

CORE DETAILS

This dataset comprises structured log files and high-frequency time-series data encompassing IP metrics, TCP/UDP protocol flags, connection states, and deep payload heuristics. The data is rigorously labeled for supervised anomaly detection and multi-class threat classification, while preserving enough baseline benign traffic to train highly accurate unsupervised anomaly detectors. Provided in highly compressed Parquet format for rapid ingestion into SIEM tools.