CasinoLimit

An Offensive Dataset Labeled with MITRE ATT&CK Techniques

About CasinoLimit

CasinoLimit is a dataset created from a large-scale pentest exercise on 114 instances of the same challenge. It features system and network logs labeled with MITRE ATT&CK techniques using a semi-automatic methodology, combining shell session analysis, network log propagation, and expert review. The dataset enables analysis of attacker behaviors and supports research with high-quality, granular labels.

The Manatee labeling tool is released alongside the CasinoLimit dataset for browsing and annotating logs and labels.

Get Started

To get started with CasinoLimit, review the documentation and data format at:
https://gitlab.inria.fr/pirat-public/datasets/casinolimit.

The paper was accepted at the 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2025) and contains valuable insights into the dataset's creation and potential applications.