Dataset of MITRE ATT&CK Enterprise network attack PCAPNG

This repository contains a publicly available ATT&CK-oriented network attack dataset composed of manually generated and labeled PCAPNG captures associated with MITRE ATT&CK Enterprise techniques and sub-techniques observable from network traffic. The dataset was generated under controlled laboratory conditions using real offensive tools, vulnerable services, protocol-compliant implementations, and manually supervised attack execution procedures. The repository includes original PCAPNG captures, manually labeled flow annotations, attack metadata, Snort configurations and rule sets, and the pruning evaluation results employed throughout the experimental study. The objective of the dataset is to provide a realistic and reproducible benchmark for evaluating intrusion detection systems, ATT&CK-oriented monitoring approaches, traffic analysis methodologies, flow-based detection techniques, and rule pruning strategies.