{"as_of":"2026-08-10T04:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2fb4da40da882480c3269b002c8322838d771a47edae0d6bf1f0c550ca12214f","coverage":[{"denominator":97,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":97,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:30:02.816653Z","state":"measured"},{"denominator":97,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":97,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.10873/citation-record","integrity":"/paper/2507.10873/integrity","json":"/paper/2507.10873/citation-record.json","paper":"/paper/2507.10873"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.132008Z","title":"Fbi releases annual internet crime report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.132008Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:897857894eedd3c3baf1a00a884edf37af0bb8fb56eb78a97ef42ec2b4051e65","observation_id":"6d12d57c-732d-4028-bb67-b64018d2764d","resolution":{"observed_at":"2026-08-06T17:29:55.132008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.197894Z","title":"Cyberattacks cost victims more than quadruple the amount hackers pay to execute attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.197894Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:0254910b11dfe9728c9d5c195e0f20afb94d903f3b7cac163996ac4f2ec5a257","observation_id":"6523c75f-9cfe-42da-92f3-d0a52837aad7","resolution":{"observed_at":"2026-08-06T17:29:55.197894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.258642Z","title":"Intrusion detection system market size, share, and growth analysis,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.258642Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:18bdad5527a7e63c9a776354019d7e7f861dda7210b5d074dd9b2258294e46c0","observation_id":"c17ede2a-c9e1-49c8-822b-7d938506974b","resolution":{"observed_at":"2026-08-06T17:29:55.258642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.314421Z","title":"Sok: History is a vast early warning system: Auditing the provenance of system intrusions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.314421Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:60302e1fee3423555ce395638e30c34e1582f386aa3d2b6649998b4d092861d4","observation_id":"30d7a3d9-e0ae-4819-b412-a6bf108b836e","resolution":{"observed_at":"2026-08-06T17:29:55.314421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.365365Z","title":"Backtracking intrusions,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.365365Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:803afcf32a5800dddc0511f9ecc3c11538c3969b578d6856df72e42fe20a2044","observation_id":"d0509619-1a87-4c5e-a810-63ec329f3739","resolution":{"observed_at":"2026-08-06T17:29:55.365365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.442449Z","title":"Nodoze: Combatting threat alert fatigue with automated provenance triage,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.442449Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:7cb174171037b756523aed06817f2f42c2b5e21d7cb10e99824ef0a3dd16fe78","observation_id":"fa19b7f0-ed25-469c-b907-7e7333aa9f03","resolution":{"observed_at":"2026-08-06T17:29:55.442449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.493585Z","title":"Transparent computing engagement 3,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.493585Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:62df16f83acfe0132a4fa4286b5d2a55bc53b3be93bee53e6645411c3ef05852","observation_id":"4ca6dab6-1426-4e26-948c-0241dca3ba8d","resolution":{"observed_at":"2026-08-06T17:29:55.493585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.577168Z","title":"Nodlink repo,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.577168Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b2a1603a9977b2831020e81807f0e7840df071764d14c1c0066394205356bba5","observation_id":"b8b371cf-84b7-4ebc-9190-b5442c96057b","resolution":{"observed_at":"2026-08-06T17:29:55.577168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01341","last_updated":"2023-10-03T16:46:54Z","snapshot_observed_at":"2026-08-07T09:30:25.048465Z","submitted_at":"2023-10-03T16:46:54Z","title":"ATLASv2: ATLAS Attack Engagements, Version 2","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01341","snapshot_observed_at":"2026-08-06T17:29:55.639072Z","title":"Atlasv2: Atlas attack engagements, version 2,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.639072Z"},"links":{"cited_paper":"/paper/2401.01341","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c064e18f4a2f2db3ca6ed58b32c34418296a90577fb7a1ff15e5aa65f0bc49df","observation_id":"e6953084-7cd4-4583-b7f8-b72aa8f8e028","resolution":{"observed_at":"2026-08-06T17:29:55.639072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.723736Z","title":"Nodlink: An online system for fine-grained apt attack detection and investigation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.723736Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:93df7baf578d8eb0815f7bdfba91bb3c4808f62bbce7af08542c877a1c72f303","observation_id":"b982eecd-4760-44d5-bcba-b5d324018a40","resolution":{"observed_at":"2026-08-06T17:29:55.723736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.796781Z","title":"AIRTAG: Towards automated attack investigation by unsupervised learning with log texts,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.796781Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:9b88f600f0d51788de74a760eb205f3e895e72deeace5938269f162dc944909e","observation_id":"8cc19acd-c948-4b19-bd9d-17406118ca7a","resolution":{"observed_at":"2026-08-06T17:29:55.796781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.838261Z","title":"Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.838261Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5d5b3995fd6ab7ac1556670afeae6ab3bb4ebf3c97e9dda7e65d905f6acd4568","observation_id":"aeea8833-ba95-4413-9f7e-44784368702c","resolution":{"observed_at":"2026-08-06T17:29:55.838261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.889328Z","title":"{MAGIC}: Detecting advanced persistent threats via masked graph representation learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.889328Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:999b962604ce2843ccf524ecd29d49884ea167344fb301f48e2f9ac6c0bf4be4","observation_id":"623022e4-8378-4c6e-b6d3-8181a22b4456","resolution":{"observed_at":"2026-08-06T17:29:55.889328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.947179Z","title":"ORTHRUS: Achieving High Quality of At- tribution in Provenance-based Intrusion Detection Systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.947179Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:394a3f318a06af94986ee9719a76833498aee8d9841d1d961cc68a4aad622ce2","observation_id":"545c9ecc-2e4e-49f6-9572-478f6de31323","resolution":{"observed_at":"2026-08-06T17:29:55.947179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.065803Z","title":"Constructing knowledge graph from cyber threat intelligence using large language model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.065803Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:aac9954d3773ccf83fd8d514e926fc4163f9259f5e7b7112b26507b9fa8fc82e","observation_id":"bf5e56bc-4f91-4d76-8e2b-b6d8ea91d891","resolution":{"observed_at":"2026-08-06T17:29:56.065803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.103099Z","title":"Ctikg: Llm-powered knowledge graph construc- tion from cyber threat intelligence,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.103099Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b1e7f3a174d0b10f6e8ce61170453b908334cd5085fb23b972c34558d22c5d58","observation_id":"7a406207-4c56-40e2-ae19-6cb03fdc8a7d","resolution":{"observed_at":"2026-08-06T17:29:56.103099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.187713Z","title":"Towards a scalable ai- driven framework for data-independent cyber threat intelligence infor- mation extraction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.187713Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:0989dc9c613d870befcbf61174604d869ac110ac414645ca15a65583e5195151","observation_id":"93335473-a017-433b-8f41-3ab5b9979eeb","resolution":{"observed_at":"2026-08-06T17:29:56.187713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.00556","last_updated":"2024-08-31T23:05:56Z","snapshot_observed_at":"2026-07-06T19:08:44.269514Z","submitted_at":"2024-08-31T23:05:56Z","title":"FADE: Few-shot/zero-shot Anomaly Detection Engine using Large Vision-Language Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.00556","snapshot_observed_at":"2026-08-06T17:29:56.288957Z","title":"Fade: Few-shot/zero-shot anomaly detection engine using large vision-language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.288957Z"},"links":{"cited_paper":"/paper/2409.00556","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:00077e738539f0c2db03b4394f36646790cce9b14432b25bdbe8e352332f7bf6","observation_id":"fd88ed37-f2a7-497e-82d0-64acd31024f0","resolution":{"observed_at":"2026-08-06T17:29:56.288957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.333428Z","title":"Ad-llm: Benchmarking large language models for anomaly detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.333428Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e4e6000550d8e759f035e9d443f522178b9f8360114d833d9cbb2dd158966584","observation_id":"b3e86ec5-7273-4cfe-b4ed-bdb0816f2efc","resolution":{"observed_at":"2026-08-06T17:29:56.333428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10350","last_updated":"2024-02-15T22:43:02Z","snapshot_observed_at":"2026-08-02T05:48:26.880299Z","submitted_at":"2024-02-15T22:43:02Z","title":"Large Language Models for Forecasting and Anomaly Detection: A Systematic Literature Review","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10350","snapshot_observed_at":"2026-08-06T17:29:56.413683Z","title":"Large language models for forecasting and anomaly detec- tion: A systematic literature review,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.413683Z"},"links":{"cited_paper":"/paper/2402.10350","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:033115615e5b6c5cc62cb699c4f2c9498f6a790e1a22108e741e4ada2e603a2a","observation_id":"e96cca0f-90d4-465e-92f9-d8d967935606","resolution":{"observed_at":"2026-08-06T17:29:56.413683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16308","last_updated":"2024-06-24T04:17:03Z","snapshot_observed_at":"2026-08-01T01:43:11.674745Z","submitted_at":"2024-06-24T04:17:03Z","title":"Anomaly Detection of Tabular Data Using LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16308","snapshot_observed_at":"2026-08-06T17:29:56.482589Z","title":"Anomaly detection of tabular data using llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.482589Z"},"links":{"cited_paper":"/paper/2406.16308","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:13bab62978b8713c49ba662e394d011c125cb8fe1cc0676f36b99acdc9c6c0ef","observation_id":"5ebc9c72-4215-4167-a6e4-2c4fba8df154","resolution":{"observed_at":"2026-08-06T17:29:56.482589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.09558","last_updated":"2023-09-18T08:13:01Z","snapshot_observed_at":"2026-07-06T16:19:49.730653Z","submitted_at":"2023-09-18T08:13:01Z","title":"Summarization is (Almost) Dead","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.09558","snapshot_observed_at":"2026-08-06T17:29:56.545032Z","title":"Summarization is (almost) dead,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.545032Z"},"links":{"cited_paper":"/paper/2309.09558","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:78f49c771cc68025cbe5a8898241b3da305d5b4317f6bb0923e2c241f983364b","observation_id":"331f0a74-7f7d-4b0e-a2f1-f3b7fed78823","resolution":{"observed_at":"2026-08-06T17:29:56.545032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.614158Z","title":"Lost in the middle: How language models use long contexts,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.614158Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:22598d2f5e996efde91362f216c2cbc555d6bdc45e7c2be20ff4cab1dbeaa529","observation_id":"0ce1a4af-8ee7-45cd-b8cf-ae2d2638b62b","resolution":{"observed_at":"2026-08-06T17:29:56.614158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.01525","last_updated":"2020-01-14T12:26:28Z","snapshot_observed_at":"2026-08-09T05:50:05.820033Z","submitted_at":"2020-01-06T12:42:51Z","title":"UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.01525","snapshot_observed_at":"2026-08-06T17:29:56.676292Z","title":"Unicorn: Runtime provenance-based detector for advanced persistent threats,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.676292Z"},"links":{"cited_paper":"/paper/2001.01525","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:d824a5856afc9cc141b02648c2d15f5c89c7b4532e559d88ef3f4521494c963a","observation_id":"74a3cc14-fef0-4b38-964a-d0098fadd308","resolution":{"observed_at":"2026-08-06T17:29:56.676292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.739178Z","title":"{PROGRAPHER}: An anomaly detection system based on provenance graph embedding,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.739178Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:270b07e89fdad18762dc9a8d52577022b1d81e4eca138bc59bca141bd0a207c4","observation_id":"bf37aa4d-06d2-4aae-a1aa-1a02a9152312","resolution":{"observed_at":"2026-08-06T17:29:56.739178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.785201Z","title":"Masked au- toencoders are scalable vision learners,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.785201Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:dcf8bfb7efbaa42cb492a80a9c41661b822b75c6709b8411654b6dc451a16b75","observation_id":"11ef014e-e86d-4c34-8c6d-cd3d309f6229","resolution":{"observed_at":"2026-08-06T17:29:56.785201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.555152Z","title":"Madeline: Continuous and low-cost monitoring with graph-free representations to combat cyber threats,","venue":null,"work_id":"22ea18af-969c-49f6-881a-83783eefa690","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.865512Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:9a33741c8440694d7967dfd1720b2a5ba2c04189fcf1c65cda46abee537b3545","observation_id":"60c9746d-03ac-447f-bc67-64260f9c7636","resolution":{"observed_at":"2026-08-06T17:30:12.562372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.925805Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.925805Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e865fbd9d59cee097f42e598c2f675003aa72d118ebec6a73760c58b6d3460e5","observation_id":"cc1c0220-5d7e-4535-94a3-fb112c784bac","resolution":{"observed_at":"2026-08-06T17:29:56.925805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.495913Z","title":"Enterprise tactics,","venue":null,"work_id":"18f5d44c-e70e-41d5-a464-46025484379f","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.014605Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:04c56a8c2d31d8ae558ae75418e49bed3af317b6ff3ad350c854ed329ecc6399","observation_id":"51002c21-5f6b-4241-8a21-0d8ffcbff21e","resolution":{"observed_at":"2026-08-06T17:30:12.503913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.454515Z","title":"Sometimes, you aren’t what you do: Mimicry attacks against provenance graph host intrusion detection systems,","venue":null,"work_id":"a5ba5171-3e87-40a1-aa77-8e9691c40ae4","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.113337Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:37bd65c96a64c489708dbd6c28b617f5a27d4a3507ae7517dc18965329b52dd8","observation_id":"bc32f1d4-dc46-47d5-a50b-267e33b5b469","resolution":{"observed_at":"2026-08-06T17:30:12.476864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.411156Z","title":"Winodws event tracing,","venue":null,"work_id":"a63de8e8-45bf-4cca-9822-1b8c6aa17d5a","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.158829Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bb7e4e3983686de894068536c31779172b86d7e9dc4f1563088f628e51428b6f","observation_id":"3b481f37-8303-48ef-a26a-8ba2125f3ffe","resolution":{"observed_at":"2026-08-06T17:30:12.423358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:57.198668Z","title":"Linux audit,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.198668Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:11f7d5ef06f6caa7200a1d105cf3d9a0885951b5bc9192f6e62fe1d5035981f8","observation_id":"755523ac-d889-40ce-a0a1-2f104bcdf38f","resolution":{"observed_at":"2026-08-06T17:29:57.198668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.312966Z","title":"Dtrace on freebsd,","venue":null,"work_id":"ed29b80e-c552-431f-98a4-350ec3dba568","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.248180Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b0cdf89b490a9f7b411e90720eb260777321fac1b08e1d6349e62c69512a9989","observation_id":"9c29804e-a6de-465c-ac18-235013060c9c","resolution":{"observed_at":"2026-08-06T17:30:12.325727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.278844Z","title":"Cyber kill chain,","venue":null,"work_id":"1d65f113-ce86-4b1a-82f1-21c7041bfd76","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.315933Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c2f7f2a7fa9209cc5840cec9ef007020d3ff1cc5606b6f395572450d040786b7","observation_id":"a002069e-9c4c-46d4-ae91-0803156ac044","resolution":{"observed_at":"2026-08-06T17:30:12.288133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.201989Z","title":"Are we there yet? an industrial viewpoint on provenance-based endpoint detection and response tools,","venue":null,"work_id":"a57861de-75e2-4404-82d3-01e93db1b70e","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.398158Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bd5c71c14da5d936e9e394078a48eeacfc3eda4abbcaa79fed30d2a7ffad163c","observation_id":"cc6477c2-121c-4282-8096-f91c6c1b3068","resolution":{"observed_at":"2026-08-06T17:30:12.260681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.004061Z","title":"Provenance-aware tracing ofworm break-in and contaminations: A process coloring approach,","venue":null,"work_id":"f85d00d2-648d-4dd2-b122-a910f453f9d4","year":2006},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.478180Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:fc32c1e6a3001332006b6753a2e53391c986af4009b343abc8dce216865dec2e","observation_id":"c1032364-5510-4dbb-b061-5e3c2452bacb","resolution":{"observed_at":"2026-08-06T17:30:12.077735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.751441Z","title":"High fidelity data reduction for big data security dependency analyses,","venue":null,"work_id":"24979696-9c36-4e87-9a40-0e196fd874a8","year":2016},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.571013Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b618e7c61e54e324fed4b70fb033b95008ea284b8259dfaca4df003d24d4b555","observation_id":"32c66bed-caba-470f-aee0-6ff34b60efd1","resolution":{"observed_at":"2026-08-06T17:30:11.864469Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.610261Z","title":"Can data provenance put an end to the data breach?","venue":null,"work_id":"fefc3063-6281-4369-8c12-383ac966ec28","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.637912Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:94458ff9adf4aec8c2afecf8441bce7b573c4dd539355d65394279d83d1d0281","observation_id":"a95a7223-8937-4830-b9d2-edec0269356a","resolution":{"observed_at":"2026-08-06T17:30:11.676377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.476016Z","title":"Towards a timely causality analysis for enterprise security,","venue":null,"work_id":"4ff6b07c-a417-42ff-8110-19a8e89a27a0","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.694250Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3d94d7e6d21c3668276c432cea3d292c57ab824446fd639e75d5a7ebb7771e0d","observation_id":"efbaca8d-d3a6-4b6a-a653-5e9d6da35801","resolution":{"observed_at":"2026-08-06T17:30:11.531480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.328488Z","title":"Holmes: real-time apt detection through correlation of suspicious information flows,","venue":null,"work_id":"220dad16-dfc8-4c61-a04c-b419fdb79ba3","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.767033Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:8e72236b7a304bda2d03984c66d89ae9be9db5de0b20a58f17f17eba58ecf2e4","observation_id":"21994383-d6a5-4a8d-ae78-7cc93587e33a","resolution":{"observed_at":"2026-08-06T17:30:11.394444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.211018Z","title":"Combating dependence ex- plosion in forensic analysis using alternative tag propagation semantics,","venue":null,"work_id":"3c0a4b72-7db1-44f9-8c4c-ea64e809ae96","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.842744Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:20bc54d47ba0b23a059ffbf97e111fe26fc136052fceb42fb17d16a16c87725e","observation_id":"cbeebed0-74d1-48ee-a866-766b6bff6071","resolution":{"observed_at":"2026-08-06T17:30:11.269314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.050326Z","title":"Nodemerge: Template based efficient data reduction for big-data causality analysis,","venue":null,"work_id":"a2dd73d7-36dd-4e48-bfb7-679edece994b","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.892251Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:db351ca87642f14a48e11d21ac0478ec0a9aca37a53203c021c8fdbd2017a992","observation_id":"a636947d-19e2-49b2-a320-d78491761ad7","resolution":{"observed_at":"2026-08-06T17:30:11.093865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.923245Z","title":"{SEAL}: Storage- efficient causality analysis on enterprise logs with query-friendly com- pression,","venue":null,"work_id":"05246620-b817-4eba-8f42-f02570404292","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.993856Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:576ea500d024370c52bd4b62eecac74b92f0ae607298d8768efb01ee79f072a4","observation_id":"b2ac9bd9-f63d-4626-966c-5eaf91cde3ea","resolution":{"observed_at":"2026-08-06T17:30:11.001851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.779143Z","title":"The case for learned provenance graph storage systems,","venue":null,"work_id":"72baba3e-6279-4dfd-bcf1-752c48328e91","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.044421Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:18e41342e5c8c89757a55e16edd06d1052eaa07a20bcca10a875bc27613c5b1e","observation_id":"1ab11741-c766-43ea-97c8-65bc9d4804af","resolution":{"observed_at":"2026-08-06T17:30:10.837763Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.634234Z","title":"Tactical provenance analysis for endpoint detection and response systems,","venue":null,"work_id":"bf1dfa90-2dae-4a8f-9276-8a57b1472036","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.126512Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a1ccfff8eac5a1ceb447e5762c7743c344139a08d21f7c4ddfdc557da9c0f49b","observation_id":"4c64684a-b93e-422a-9db1-e5cb21cc8751","resolution":{"observed_at":"2026-08-06T17:30:10.693697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.494071Z","title":"Alchemist: Fusing application and audit logs for precise attack provenance without instrumentation,","venue":null,"work_id":"74b5d7bf-36c7-481a-bc9c-9d0ae3ff2452","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.196404Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:7bf4b39d9db2fe8230ef322e265e9ccd49b1dbf12d4c36603a322269f367a0e9","observation_id":"c55b2174-36bc-4d45-b1ce-2c3e572f58c0","resolution":{"observed_at":"2026-08-06T17:30:10.559253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.05034","last_updated":"2023-09-28T03:02:57Z","snapshot_observed_at":"2026-07-06T16:04:26.461227Z","submitted_at":"2023-08-09T16:04:55Z","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.05034","snapshot_observed_at":"2026-08-06T17:29:58.331185Z","title":"Kairos: Practical intrusion detection and investigation using whole-system provenance,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.331185Z"},"links":{"cited_paper":"/paper/2308.05034","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e88d6f5005e87a0111681a5efc167c11df4ed619f644fb5228a72ccbc64fb304","observation_id":"a14968af-ddc0-4579-8a48-b001a6daf866","resolution":{"observed_at":"2026-08-06T17:29:58.331185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.337218Z","title":"R-caid: Embedding root cause analysis within provenance-based intrusion detection,","venue":null,"work_id":"ec0d74ab-0fe4-4ad9-8e78-4b2cfaeb6431","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.397703Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:810670707842a3000cfe4cf7214ab9e9664ceb8e428b52382c30a4c9d954b53a","observation_id":"2a0b26fc-6f60-4aae-b79f-1c7d60d56c35","resolution":{"observed_at":"2026-08-06T17:30:10.419230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.044047Z","title":"Shadewatcher: Recommendation-guided cyber threat analysis using system audit records,","venue":null,"work_id":"7e97d12d-6909-4a4f-8c68-5bad8feaf0c1","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.480167Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bdd8d66cd63a5be67ce24b1cac6f8261f08bba7c55874cd9851f932b9e12d8da","observation_id":"cd355c83-bf6e-49ac-acd8-6374431c1444","resolution":{"observed_at":"2026-08-06T17:30:10.202376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.735869Z","title":"SIGL: securing software installations through deep graph learning,","venue":null,"work_id":"577df186-0288-489c-9e08-c4aea7319d8d","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.581410Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b7d39afe6c285fac7082f02f3fd819d527d2ee71a63ce6c04cc95d0808ac25c4","observation_id":"e674b14c-49a4-48d4-afc8-cea022764d6c","resolution":{"observed_at":"2026-08-06T17:30:09.784335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.550849Z","title":"Darpa tc engagement 3 ground-truth,","venue":null,"work_id":"b4e9e792-91d3-482a-91d3-09ad89f9fbe8","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.661412Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:00088b6251b9c0402e8642337c057d9ae45b909ff3958f58d2427ff0bf6825a4","observation_id":"4e0ca736-a786-4bc4-acbe-51fb416f1b0a","resolution":{"observed_at":"2026-08-06T17:30:09.643516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14487","last_updated":"2024-05-23T12:19:07Z","snapshot_observed_at":"2026-08-08T00:00:01.788882Z","submitted_at":"2024-05-23T12:19:07Z","title":"A Comprehensive Overview of Large Language Models (LLMs) for Cyber Defences: Opportunities and Directions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14487","snapshot_observed_at":"2026-08-06T17:29:58.767171Z","title":"A comprehensive overview of large lan- guage models (llms) for cyber defences: Opportunities and directions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.767171Z"},"links":{"cited_paper":"/paper/2405.14487","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:ff1de22dce84a1380aa3086b48ea9bfd93fa6fc06919294dbb44553a3cd86c6e","observation_id":"eb275d39-3a86-4342-8385-8eff66bc6596","resolution":{"observed_at":"2026-08-06T17:29:58.767171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01038","last_updated":"2024-03-02T00:10:45Z","snapshot_observed_at":"2026-08-09T09:32:54.873358Z","submitted_at":"2024-03-02T00:10:45Z","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01038","snapshot_observed_at":"2026-08-06T17:29:58.851040Z","title":"Autoattacker: A large language model guided system to implement automatic cyber-attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.851040Z"},"links":{"cited_paper":"/paper/2403.01038","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:d947317d2c18eb44f0a40cfa93d711c6929ad21bdcc2e84c55291f7ac48762e6","observation_id":"50cf2013-9dd2-4a06-b1de-2683af952af4","resolution":{"observed_at":"2026-08-06T17:29:58.851040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.343404Z","title":"{PentestGPT}: Evaluating and harnessing large language models for automated penetration testing,","venue":null,"work_id":"7e84550a-0aba-453f-bbf1-55b4269a363e","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.977515Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:8dd95320c6ff3b15699c47f80bd2ef44b741f3fd8cf626fe8dcbdca47e656a7d","observation_id":"e00dd72d-9c72-4f3d-a575-cdf0b69b69b4","resolution":{"observed_at":"2026-08-06T17:30:09.436223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.047072Z","title":"Large language model guided protocol fuzzing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.047072Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c959e004a94f1692fb7baddf7d11ddaa3bee7ec244b13db19bd7e8668e8e05da","observation_id":"a13b05ca-5738-4d33-9109-b90f79215757","resolution":{"observed_at":"2026-08-06T17:29:59.047072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.101361Z","title":"Exploring {ChatGPT’s} capabilities on vulnerability management,","venue":null,"work_id":"72f649a2-07cb-4e26-a904-81243cb1efa6","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.121697Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:688cee048265a6957c57141c40b26cf6bbc3e263e08707e5da368ac8d0be760a","observation_id":"fa90e2fd-1840-47a0-ab46-5aaa40e79302","resolution":{"observed_at":"2026-08-06T17:30:09.208433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.02074","last_updated":"2024-09-03T17:22:00Z","snapshot_observed_at":"2026-08-10T01:44:22.749176Z","submitted_at":"2024-09-03T17:22:00Z","title":"RACONTEUR: A Knowledgeable, Insightful, and Portable LLM-Powered Shell Command Explainer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.02074","snapshot_observed_at":"2026-08-06T17:29:59.187409Z","title":"Raconteur: A knowledgeable, insightful, and portable llm-powered shell command explainer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.187409Z"},"links":{"cited_paper":"/paper/2409.02074","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:6d3156b338ba17a3bfd492e629a511c0d4cb1d8192ffe653a5cb5bcad279e85d","observation_id":"9f848941-9faf-4cab-8752-77b90f8a62cb","resolution":{"observed_at":"2026-08-06T17:29:59.187409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.259554Z","title":"Deeplog: Anomaly detection and diagnosis from system logs through deep learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.259554Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5bde1ca06ca9ba29006ab718cebbe2ea33980b39def4d2886f422d024bb13d13","observation_id":"8672f890-1202-4141-958f-caa8166b5092","resolution":{"observed_at":"2026-08-06T17:29:59.259554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.866365Z","title":"Log2vec: A heterogeneous graph embedding based approach for detecting cyber threats within enterprise,","venue":null,"work_id":"e72b20b2-c405-4b90-bdec-46062ef5edf4","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.331971Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3d63505bdf6ca0e508d2fe7c4fd509613f44d4c5c6f99476b0444ce3176e6ffb","observation_id":"8173209c-0ee5-4ae3-bf7d-aae14f1b27b0","resolution":{"observed_at":"2026-08-06T17:30:08.963852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.684869Z","title":"{ATTACK2VEC}: Leveraging temporal word embeddings to understand the evolution of cyberattacks,","venue":null,"work_id":"8a68728b-9900-4429-be21-af81b5b05c6b","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.388082Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:fb1cf678a9eb295014a90d23a7d48800283c8e022db7660afd54e2ec3a09fe4c","observation_id":"cc428afa-144e-4f12-886a-9a40a3e882d4","resolution":{"observed_at":"2026-08-06T17:30:08.778686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.475590Z","title":"Semantic anomaly detection with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.475590Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bf268201ab57273eee8e7174efc10c573098a06ba4d98eea83897c2d68a2d3d0","observation_id":"47815c30-c1c6-4137-b7f2-f6359a5f3231","resolution":{"observed_at":"2026-08-06T17:29:59.475590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.494721Z","title":"tiktoken,","venue":null,"work_id":"479b7d42-79ae-4713-8b3e-0b219cb348ca","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.548683Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f6a6b41f03762ec2ae5c0d421b6460b5042497ba7db4a2fdf266a6b2e80be80c","observation_id":"0ebfde0e-8156-416d-bf86-6f6f17022f13","resolution":{"observed_at":"2026-08-06T17:30:08.548005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05167","last_updated":"2025-07-09T14:35:23Z","snapshot_observed_at":"2026-08-08T19:59:08.845558Z","submitted_at":"2025-02-07T18:49:46Z","title":"NoLiMa: Long-Context Evaluation Beyond Literal Matching","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05167","snapshot_observed_at":"2026-08-06T17:29:59.630413Z","title":"Nolima: Long-context evaluation beyond literal matching,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.630413Z"},"links":{"cited_paper":"/paper/2502.05167","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:acd59b3357f4facdb5fff374d090d35e7af03ea60a267dc122db03b1805db39d","observation_id":"3d985bc1-cec7-44e5-919f-670e01084ff8","resolution":{"observed_at":"2026-08-06T17:29:59.630413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.328217Z","title":"Fundamental limits of prompt compression: A rate-distortion framework for black-box language models,","venue":null,"work_id":"db104115-74a0-469d-8896-a0035c85f279","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.673991Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:6baef5a4b602d8c385bf883ac8576fd8973d727c952c3da640efa9dafc73ecf0","observation_id":"c6ec1f36-3fc1-4e39-87c5-a10f0317f963","resolution":{"observed_at":"2026-08-06T17:30:08.403909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07927","last_updated":"2025-03-16T06:23:34Z","snapshot_observed_at":"2026-08-05T17:55:26.008016Z","submitted_at":"2024-02-05T19:49:13Z","title":"A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07927","snapshot_observed_at":"2026-08-06T17:29:59.766686Z","title":"A systematic survey of prompt engineering in large language models: Techniques and applications,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.766686Z"},"links":{"cited_paper":"/paper/2402.07927","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:375c2e77e1367f1697f50835bd1c9bb2d79ebf021247df671b46e91a1dca2ccf","observation_id":"3e9b5f89-4d86-460f-b30e-e4fb93c622a8","resolution":{"observed_at":"2026-08-06T17:29:59.766686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.821399Z","title":"Chain-of-thought prompting elicits reasoning in large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.821399Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b52c10eb9c6c1557a3f5541f428933675ccf64963f45fc87136887ba08339154","observation_id":"34dace7f-e0ec-452c-b684-9b55bb187ec7","resolution":{"observed_at":"2026-08-06T17:29:59.821399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.11171","last_updated":"2023-03-07T17:57:37Z","snapshot_observed_at":"2026-07-06T12:50:22.773056Z","submitted_at":"2022-03-21T17:48:52Z","title":"Self-Consistency Improves Chain of Thought Reasoning in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.11171","snapshot_observed_at":"2026-08-06T17:29:59.893803Z","title":"Self-consistency improves chain of thought reasoning in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.893803Z"},"links":{"cited_paper":"/paper/2203.11171","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:52256127683de0f1b91aedfdfceafcb3b799fd455a5c45373722a7f6dd885ac8","observation_id":"37adf0a8-5c73-4ae2-9e9a-ac887b188d38","resolution":{"observed_at":"2026-08-06T17:29:59.893803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.107789Z","title":"Custos: Practical tamper-evident auditing of operating systems using trusted execution,","venue":null,"work_id":"46d70327-cae0-4ba8-bbad-306c8314be60","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.030936Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c3ef6d1f33fb5b6e07a25117bfb53df42ed843dacffab570bfa48dad2d2dad4d","observation_id":"61f762c5-d2ae-49be-8a2e-19e6c3018b46","resolution":{"observed_at":"2026-08-06T17:30:08.204888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.944354Z","title":"Auditing frameworks need resource isolation: A systematic study on the super producer threat to system auditing and its mitigation,","venue":null,"work_id":"54a0fab9-5e68-4f93-ac47-7d81ccc26ce2","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.104146Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:19c256b3e63065b6dc69bfeaf8a2c8b7d2830ea50d17d9aee13f2ab28ae82881","observation_id":"5a51d194-754b-4757-8bc0-cff2a5b38694","resolution":{"observed_at":"2026-08-06T17:30:07.998211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.181120Z","title":"Support vector method for novelty detection,","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.181120Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:097acf0f624bd0f8dd673eae46a0b8a4ff118d557aab8b6d4a305e7be9b72677","observation_id":"eb7bc96a-190c-4e83-b42a-c7e80283763e","resolution":{"observed_at":"2026-08-06T17:30:00.181120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.248846Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.248846Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a68862f606fa267a0bd1c7665dfe45cfa3f62cd42bad05262af2b69c5a4679bb","observation_id":"5c7022b8-b34e-4229-b239-e6d9f0c42b9b","resolution":{"observed_at":"2026-08-06T17:30:00.248846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.733299Z","title":"bert-base-uncased,","venue":null,"work_id":"60d8ee36-41b2-4ac8-851d-db85d4aaa219","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.328746Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a91cc52b995d2c4abafe0bf309e7354045433ed7e05f8e3a38aa037588ecc6cd","observation_id":"c26624ca-fdd1-40d9-b51e-14501afc0029","resolution":{"observed_at":"2026-08-06T17:30:07.768556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12035","last_updated":"2022-10-17T14:08:37Z","snapshot_observed_at":"2026-07-06T13:13:22.359120Z","submitted_at":"2022-05-24T12:43:04Z","title":"RetroMAE: Pre-Training Retrieval-oriented Language Models Via Masked Auto-Encoder","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12035","snapshot_observed_at":"2026-08-06T17:30:00.412279Z","title":"Retromae: Pre-training retrieval- oriented language models via masked auto-encoder,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.412279Z"},"links":{"cited_paper":"/paper/2205.12035","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e3c7161c8e5a9829cc5134fe42e1063c34ba3e6dd9034c2b6d422a33910dc74c","observation_id":"99832e11-fd86-4a71-8ce3-a65a9c4bb9ca","resolution":{"observed_at":"2026-08-06T17:30:00.412279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.596292Z","title":"Backtracking intrusions,","venue":null,"work_id":"8cd556bb-218f-4250-938a-d3a93a1737b0","year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.514080Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:20df3de8cbf3b29614c363124a85e3fa7ddea708620a4f07225a63a369901164","observation_id":"8d3cd82d-e2ab-4432-be2e-9770047c3b9a","resolution":{"observed_at":"2026-08-06T17:30:07.669440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.413355Z","title":"Representative sam- pling for reliable data analysis: theory of sampling,","venue":null,"work_id":"897f05ed-6244-47ed-9aaa-430dd4a74f3b","year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.614753Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:95420db6585f5474311731acaef7435ef2726b0f51ade3d077e5ede932836d09","observation_id":"264a1406-3a78-4df1-b5ca-3cddd1e5527d","resolution":{"observed_at":"2026-08-06T17:30:07.506534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.259590Z","title":"ATLAS: A sequence-based learning approach for attack investigation,","venue":null,"work_id":"513c0b3c-4e34-420f-b012-e6c02e3c86b6","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.709741Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:8b2b35b0cf08c9f0a171e42676c64a5d589c97f05be31525aef6cf752b65aacf","observation_id":"029e3d08-2928-4994-abc7-a1d8f112e856","resolution":{"observed_at":"2026-08-06T17:30:07.310877Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.791725Z","title":"Threatrace: Detecting and tracing host-based threats in node level through provenance graph learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.791725Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bbaf4106aa83498e832448de732a9df3c2f584cf1503ec2222fcfc4ad85077aa","observation_id":"692a6a49-6875-466f-8ed8-10c6f9a316ae","resolution":{"observed_at":"2026-08-06T17:30:00.791725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.045590Z","title":"Mitigating advanced and persistent threat (apt) damage by reasoning with provenance in large enterprise network (marple) program,","venue":null,"work_id":"7740f49a-7bac-4c47-b5f1-3a13211e51cc","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.883684Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e5fb8fa1155a51fe8b364dcec78dfc23b2a7cd201b5daaba97c0c159b3b4646a","observation_id":"753570f1-183c-4067-b2cf-fff35d4eae1d","resolution":{"observed_at":"2026-08-06T17:30:07.144132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.815667Z","title":"Atlasv2,","venue":null,"work_id":"cf1a6a61-119b-40ad-8945-cecf972f597b","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.985610Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b4759d2824f699836fcdc9e216a056d4e7c548b8b2e0d68fa40190a0a517d127","observation_id":"e50e8dec-88b4-4ef6-9dba-5761ca5dfe89","resolution":{"observed_at":"2026-08-06T17:30:06.928481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.557732Z","title":"Flash repo,","venue":null,"work_id":"56ba5d06-6a20-4dcc-8882-593ebff878c4","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.065685Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:ffd354d97462ca86c7b693f3f6301f1a7792f685bb9b4f3fc594665dd0d71709","observation_id":"a7444d72-e49e-49ab-ae43-04c093b4fc7e","resolution":{"observed_at":"2026-08-06T17:30:06.668629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.331491Z","title":"Magic repo,","venue":null,"work_id":"d43a4d4a-b83f-4c44-ae74-5ab90af1cb8d","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.196441Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:9cba1031e52a96a168b0e59bf2aaa6343206e083f7548e339ecf76d1b5efb26c","observation_id":"a05f47ee-be04-4128-bb15-047193a9860c","resolution":{"observed_at":"2026-08-06T17:30:06.402552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.074444Z","title":"Orthrus repo,","venue":null,"work_id":"b1cb67d7-bd91-4b99-ae30-bccd030b053e","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.278438Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3bb01431f138a64a833debb3e8a6c262dd9fc9b3c995252b8a3cc4575f5c0fb9","observation_id":"f24993d7-3ba3-470b-8acf-bc5c0eee970f","resolution":{"observed_at":"2026-08-06T17:30:06.203612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.862661Z","title":"Airtag repo,","venue":null,"work_id":"6dc2f028-7ec6-4558-a79b-9965c891a926","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.330764Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:88b37a3a21ecf4b98131008e3f566fe92e4d390265ed86915b7e3596ac04b240","observation_id":"2b2b42d8-8271-42bc-822c-d70abc547a4b","resolution":{"observed_at":"2026-08-06T17:30:05.960843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.609846Z","title":"Atlas dataset,","venue":null,"work_id":"5993669e-babe-4650-b848-205484f93c4f","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.420613Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e4d934ff8b5270f6258c043328f2cc3e2ffe957f6e9900c6a1bfd619f3e3c181","observation_id":"7778bf9a-0a31-403c-81b8-ca8c53d90919","resolution":{"observed_at":"2026-08-06T17:30:05.721419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T17:30:01.535060Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.535060Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bb7ec13b17c9a00820849c5bcbe28d92169ce2f94fcf18fc3a23a0d9555baa3e","observation_id":"29df7f98-d898-4900-8254-af9e293b2e0b","resolution":{"observed_at":"2026-08-06T17:30:01.535060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T17:30:01.634139Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.634139Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1cf8a25481ebb45da155ef876b0d99412709319fc4b4e1f2788a3e7a0a8b050e","observation_id":"d083c56b-190b-4321-80e5-0bbdf127b5bb","resolution":{"observed_at":"2026-08-06T17:30:01.634139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.447462Z","title":"Openai o3-mini,","venue":null,"work_id":"f0cdeb76-3137-41f6-917f-12e2633d9f64","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.764153Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:66a133923b4b142a942874aa42a69193ed3e952b48a3143d563b49e9afdbfd40","observation_id":"0cdc90d4-c8ad-4a56-987b-d6b1ef6a9c98","resolution":{"observed_at":"2026-08-06T17:30:05.515588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.245295Z","title":"Sonar reasoning pro,","venue":null,"work_id":"a9831f9e-f7c8-4856-84bb-1cd62a5dbbaa","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.829143Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:6b539d792366249dba56cae0979f552bb53c5d0bb8e6409fce1b7481552c085d","observation_id":"c6d97db2-39a2-4894-be5a-b09f6bb0919b","resolution":{"observed_at":"2026-08-06T17:30:05.318796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.093974Z","title":"all-MiniLM-L6-v2,","venue":null,"work_id":"4925e5dc-c295-499c-8cc9-dbb8cf28c0b4","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.932568Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:632104665c1f8105f14bd5617540ccd78a3ae59dc8abbc5a067c0da178861228","observation_id":"c5113323-6e29-48b3-8951-d6deba6d9b03","resolution":{"observed_at":"2026-08-06T17:30:05.151212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.00055","last_updated":"2017-07-31T20:12:06Z","snapshot_observed_at":"2026-08-04T03:50:51.013049Z","submitted_at":"2017-07-31T20:12:06Z","title":"SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.00055","snapshot_observed_at":"2026-08-06T17:30:02.021302Z","title":"Semeval- 2017 task 1: Semantic textual similarity-multilingual and cross-lingual focused evaluation,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.021302Z"},"links":{"cited_paper":"/paper/1708.00055","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:d834fed2a09547663052b4f352ba29b301691fef3af21e2c1716e1cfda8b58bb","observation_id":"dccc9578-dceb-4cae-99e2-1e3dcc0cfa48","resolution":{"observed_at":"2026-08-06T17:30:02.021302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.851616Z","title":"(2025) Api pricing","venue":null,"work_id":"306665d2-558e-450e-8a2e-680db7a3a6e8","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.137618Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:022e4904834618e075325e8910fd22bca9baafba9a7ba8c7cb5993a43257c05a","observation_id":"53ef3339-c6cc-4ace-8b3a-48db4f1b85d6","resolution":{"observed_at":"2026-08-06T17:30:04.934529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.681233Z","title":"Attacks on deidentification’s defenses,","venue":null,"work_id":"89a8e2b3-db3f-4fdd-9346-202c25124fb2","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.256881Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5d4a2cea9bbefbddecca09f2dac5c97709bfb62364cd1cbce4c7aaa358fd860f","observation_id":"602419b2-44a9-495f-b8f3-f11e16810ccb","resolution":{"observed_at":"2026-08-06T17:30:04.738393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13372","last_updated":"2024-06-27T22:44:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T08:08:54Z","title":"LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13372","snapshot_observed_at":"2026-08-06T17:30:02.345862Z","title":"Llamafactory: Unified efficient fine-tuning of 100+ language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.345862Z"},"links":{"cited_paper":"/paper/2403.13372","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:80f2238665ff8844ed429bbef0dbd1d3fd2e028d204ed5c22dfac5cec4b7eb55","observation_id":"985fefb7-c75f-4fdc-a66a-c262d885aec3","resolution":{"observed_at":"2026-08-06T17:30:02.345862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.19393","last_updated":"2025-03-01T06:07:39Z","snapshot_observed_at":"2026-07-06T20:29:11.710285Z","submitted_at":"2025-01-31T18:48:08Z","title":"s1: Simple test-time scaling","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.19393","snapshot_observed_at":"2026-08-06T17:30:02.499902Z","title":"s1: Simple test-time scaling,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.499902Z"},"links":{"cited_paper":"/paper/2501.19393","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a6af7635a4f0822b273a9cc8fbd16558d9f55c1e44ae139a16c688c32d815b32","observation_id":"d9ca10db-f661-4016-92b3-beff54f075b1","resolution":{"observed_at":"2026-08-06T17:30:02.499902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-06T17:30:02.613382Z","title":"Persistent pre-training poisoning of llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.613382Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:4d09b8885d228041f860630742f5271b4332d664d9cebe350a473e1d7fc7afdf","observation_id":"7172ed78-bb13-4fd4-be47-6d7877ac3bd1","resolution":{"observed_at":"2026-08-06T17:30:02.613382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.510992Z","title":"Sok: Pragmatic assessment of machine learning for network intrusion detection,","venue":null,"work_id":"0052374c-9a46-47df-a846-0879d61bcbe7","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.728879Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a13bb3a388f5f01afb171c95749a892b8b6105a1f817b6189647154eac5129dc","observation_id":"130925ab-1efb-4e0e-a993-56414968dbcb","resolution":{"observed_at":"2026-08-06T17:30:04.575165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.295390Z","title":"A survey on data-driven network intrusion detection,","venue":null,"work_id":"f4e12ede-9ab1-428d-8cf8-24a20642ae25","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.816653Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c63d34316b07f781ffa4b212ae70ff6a34dc2cae7a86cc62a62af673316c1a0c","observation_id":"7d98fc00-c8fa-4411-be94-0ae4b934d7d7","resolution":{"observed_at":"2026-08-06T17:30:04.381432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T05:52:35.091450Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection"},"reference_resolution":{"displayed":97,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":49,"verified_exact":0,"verified_fuzzy":48},"total_outbound_references":97},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 97 of 97 outbound references and 0 inbound Pith citation observations for arXiv:2507.10873."}