Add malware analysis + counter/remediation sources

train_securecoder.py

@@ -83,6 +83,15 @@ MIX: list[Source] = [
            note="broad security Q&A"),
     Source("Humanlearning/CyberSecurity_OWASP-sft-dataset", 5000, "messages",
            note="OWASP / secure-coding SFT"),
+    # ---- malware: understand it, then counter/fix it ---------------------
+    # Malware *understanding* - how families behave, ATT&CK campaigns,
+    # detection engineering and triage. Grounded in MITRE ATT&CK + NIST IR.
+    Source("reloading0101/threat-intelligence-dataset", 9000, "auto",
+           note="malware/IR playbooks: timelines, detection, response"),
+    # Malware *countering* - disrupting C2, quarantining hosts, remediation
+    # and hunter-facing defensive guidance.
+    Source("ukcli/Cybersecurity-Dataset-Heimdall-v1.1", 9000, "auto",
+           note="cyber-defense: C2 disruption, detection, remediation"),
     Source("MrClipperz134/CTF-Instruct", 3000, "io",
            note="CTF instruction/output"),
     Source("TrueNix/ctf-solver-dataset", 3000, "messages",