{"id":"W4414136034","doi":"10.1016/j.cose.2025.104651","title":"Fuzzy to clear: Elucidating the threat hunter cognitive process and cognitive support needs","year":2025,"lang":"en","type":"article","venue":"Computers & Security","topic":"Information and Cyber Security","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria","funders":"Natural Sciences and Engineering Research Council of Canada; Mitacs","keywords":"Process (computing); Cognition; Work (physics); Fuzzy cognitive map; Honeypot; Fuzzy logic","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.006281071,0.000494596,0.0003411279,0.00233749,0.004197471,0.006011201,0.001367104,0.001890898,0.002934151],"category_scores_gemma":[0.02806229,0.0005393218,0.0003996154,0.0007904043,0.007568548,0.009866081,0.005959349,0.003337592,0.0002735291],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.002514233,"about_ca_system_score_gemma":0.004054881,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005770447,"about_ca_topic_score_gemma":0.008740607,"domain_scores_codex":[0.997085,0.001351805,0.00009450172,0.0003037802,0.0007583516,0.0004065913],"domain_scores_gemma":[0.986829,0.00902837,0.001230219,0.0006738939,0.00121695,0.001021544],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"qualitative","study_design_gemma":"qualitative","study_design_scores_codex":[0.0001314589,0.0003044595,0.03768519,0.0002520545,0.00002250468,0.000513655,0.9064545,0.0003989464,0.002511584,0.02242546,0.0008719893,0.02842825],"study_design_scores_gemma":[0.00003148691,0.0002617822,0.0377727,0.0002312089,0.00004126131,0.0005289997,0.8925502,0.007103063,0.001313224,0.05015824,0.009905737,0.0001021674],"study_design_candidate":"qualitative","study_design_consensus":"qualitative","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9802406,0.000124063,0.00680868,0.001632107,0.00001486343,0.00008510062,0.00002096688,0.00002241221,0.01105117],"genre_scores_gemma":[0.9951356,0.00008359933,0.003685205,0.0001655286,0.000003073525,0.00004106492,0.00002143659,0.00000733551,0.0008570573],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.006281071,"threshold_uncertainty_score":0.03321791,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.00807541147782273,"score_gpt":0.2662565501271994,"score_spread":0.2581811386493766,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}