OnionGraph

In the two ZIP files above, we have provided the data required to construct the TSGs. The files in malware_traffic.zip match the order in Family_Avclass.txt.

The raw traffic data is too large and exceeds the Git LFS data quota. If you want to obtain the PCAPs, you can download them from the tria.ge sandbox using the MD5 from the Family_Avclass.txt and benign.txt.