Paper Citation Record · LEDGER

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting

As of 17 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 2 inbound Pith citation observations for arXiv:2509.23571.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2509.23571 v3

Coverage vector

measured 35 of 35 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T14:43:00.540074Z

measured 37 of 37 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-15T17:55:19.885565Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-05-12T06:01:22.935133Z

Reference resolution

35 of 35 outbound references displayed

verified exact0
verified fuzzy0
unresolved35
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation ed287650-8aae-4599-8832-05804fc4637c · outbound

This paper cites Exploring LLMs for Malware Detection: Review, Framework Design, and Countermeasure Approaches.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Exploring LLMs for Malware Detection: Review, Framework Design, and Countermeasure Approaches

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:55.997378Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 879a5909-2399-4b79-aa26-cb68a5cbd7b9 · outbound

This paper cites Recent activity by APT29 involving phishing attacks.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Recent activity by APT29 involving phishing attacks

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:00.300356Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 76eeb581-2705-45ad-9a38-86094e7e1a23 · outbound

This paper cites PentestGPT: An LLM-empowered Automatic Penetration Testing Tool.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting PentestGPT: An LLM-empowered Automatic Penetration Testing Tool

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.442650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c843c349-e698-40e1-83e5-a2563f7cc3cf · outbound

This paper cites Given a vulnerability description and metric values (Confidentiality, Integrity, Availability, Scope, Attack Vector, etc.), compute the CVSS v3.1 Base Score.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Given a vulnerability description and metric values (Confidentiality, Integrity, Availability, Scope, Attack Vector, etc.), compute the CVSS v3.1 Base Score

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:00.368756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 73607cfe-56a0-4dad-bcf7-da49325fa311 · outbound

This paper cites LawBench: Benchmarking Legal Knowledge of Large Language Models.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting LawBench: Benchmarking Legal Knowledge of Large Language Models

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.728972Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ff3934ee-a634-4147-8c59-bf63a2da6dad · outbound

This paper cites Getting pwn’d by ai: Penetration testing with large language models.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Getting pwn’d by ai: Penetration testing with large language models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.871031Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3479835f-b7dc-4ee1-915f-dd801fba241d · outbound

This paper cites Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.074742Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 86b985b7-1372-49a6-9559-b40879ee6b34 · outbound

This paper cites Double Backdoored: Converting Code Large Language Model Backdoors to Traditional Malware via Adversarial Instruction Tuning Attacks.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Double Backdoored: Converting Code Large Language Model Backdoors to Traditional Malware via Adversarial Instruction Tuning Attacks

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.277985Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a74e8a31-41a2-46ee-b059-42dd4d490b5e · outbound

This paper cites AgentGen: Enhancing Planning Abilities for Large Language Model based Agent via Environment and Task Generation.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting AgentGen: Enhancing Planning Abilities for Large Language Model based Agent via Environment and Task Generation

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.447644Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0a9743d-324b-46dd-9305-bad0f4975483 · outbound

This paper cites SEvenLLM: Benchmarking, Eliciting, and Enhancing Abilities of Large Language Models in Cyber Threat Intelligence.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting SEvenLLM: Benchmarking, Eliciting, and Enhancing Abilities of Large Language Models in Cyber Threat Intelligence

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.638474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f0696039-ceff-457a-b349-8a9394cff6ca · outbound

This paper cites SWE-bench: Can Language Models Resolve Real-World GitHub Issues?.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting SWE-bench: Can Language Models Resolve Real-World GitHub Issues?

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.860062Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 74321f04-6cec-4cf2-bdbb-52392101377d · outbound

This paper cites From ML to LLM: Evaluating the Robustness of Phishing Webpage Detection Models against Adversarial Attacks.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting From ML to LLM: Evaluating the Robustness of Phishing Webpage Detection Models against Adversarial Attacks

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.029258Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation afcbea36-528e-46c1-a069-673915217a58 · outbound

This paper cites Mary M Lucas, Justin Yang, Jon K Pomeroy, and Christopher C Yang.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Mary M Lucas, Justin Yang, Jon K Pomeroy, and Christopher C Yang

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.251543Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1deb6f73-04d7-4ccd-8be9-d519bfa4a402 · outbound

This paper cites John Morris, Eli Lifland, Jin Yong Yoo, Jake Grigsby, Di Jin, and Yanjun Qi.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting John Morris, Eli Lifland, Jin Yong Yoo, Jake Grigsby, Di Jin, and Yanjun Qi

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.347252Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 84e9fd00-88f7-4d68-9944-69a8ba80a76d · outbound

This paper cites Self-contradictory Hallucinations of Large Language Models: Evaluation, Detection and Mitigation.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Self-contradictory Hallucinations of Large Language Models: Evaluation, Detection and Mitigation

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.510053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56861ea8-a6ca-447d-b970-86941d6a8b75 · outbound

This paper cites HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting HackSynth: LLM Agent and Evaluation Framework for Autonomous Penetration Testing

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.660386Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3540c3ce-97a8-4aa0-b976-37c5f23aec20 · outbound

This paper cites LAMD: Context-driven Android Malware Detection and Classification with LLMs.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting LAMD: Context-driven Android Malware Detection and Classification with LLMs

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.798445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 822c3d1c-f698-4902-be20-5fe59bf02018 · outbound

This paper cites PentestAgent: Incorporating LLM Agents to Automated Penetration Testing.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting PentestAgent: Incorporating LLM Agents to Automated Penetration Testing

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.126030Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 181ddbef-3acf-404c-a71e-400fc87569da · outbound

This paper cites LProtector: An LLM-driven Vulnerability Detection System.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting LProtector: An LLM-driven Vulnerability Detection System

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.281707Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fc089923-f062-4713-9b86-731138440fd7 · outbound

This paper cites Trust Me, I'm Wrong: LLMs Hallucinate with Certainty Despite Knowing the Answer.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Trust Me, I'm Wrong: LLMs Hallucinate with Certainty Despite Knowing the Answer

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.437743Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 24a463b9-bcb9-479c-9c74-10d3354b88aa · outbound

This paper cites Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Towards Understanding Chain-of-Thought Prompting: An Empirical Study of What Matters

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.598970Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 97b00db1-7dc6-49d9-8677-e69b0a1ddb9f · outbound

This paper cites Towards Better Chain-of-Thought Prompting Strategies: A Survey.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Towards Better Chain-of-Thought Prompting Strategies: A Survey

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.770384Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation de27c9e2-631d-4ce6-92fc-0ad621c483f7 · outbound

This paper cites BERTScore: Evaluating Text Generation with BERT.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting BERTScore: Evaluating Text Generation with BERT

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:59.893756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cf5585ba-a656-413d-a23f-c5741f87fc15 · outbound

This paper cites Each CVE entry is enriched with exploitability status, malware connections, and actor attribution.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Each CVE entry is enriched with exploitability status, malware connections, and actor attribution

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:00.068603Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d1cfb6ad-fc9c-41ea-93df-b837e26610b4 · outbound

This paper cites Entries often include exploitability scores, attack vectors, exploitation status, and tags related to malware or campaigns.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Entries often include exploitability scores, attack vectors, exploitation status, and tags related to malware or campaigns

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:00.190538Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 713946d3-1953-4df6-bfb2-9bbf9ac0e35d · outbound

This paper cites \n", "Q:.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting \n", "Q:

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:00.540074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b7d6512-f21c-434b-a8e0-1e0f7890470d · outbound

This paper cites EmbodiedEval: Evaluate Multimodal LLMs as Embodied Agents.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting EmbodiedEval: Evaluate Multimodal LLMs as Embodied Agents

Reference 2013

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.148795Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 25fa5b4f-dfe7-49d1-8644-beaec5f741f1 · outbound

This paper cites A Survey on In-context Learning.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting A Survey on In-context Learning

Reference 2018

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.514657Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 57876458-b78d-4858-a0d9-49f8537d52c8 · outbound

This paper cites Improving Discovery of Known Software Vulnerability For Enhanced Cybersecurity.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Improving Discovery of Known Software Vulnerability For Enhanced Cybersecurity

Reference 2019

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:58.909486Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2f3222c0-e045-4213-a748-ff069c3b7153 · outbound

This paper cites Turning the hunted into the hunter via threat hunting: Life cycle, ecosystem, challenges and the great promise of ai.arXiv preprint arXiv:2204.11076,.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Turning the hunted into the hunter via threat hunting: Life cycle, ecosystem, challenges and the great promise of ai.arXiv preprint arXiv:2204.11076,

Reference 2020

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:57.173909Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9ccc2245-e5a5-4540-bb65-45706cfcee4b · outbound

This paper cites ThreatZoom: CVE2CWE using Hierarchical Neural Network.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting ThreatZoom: CVE2CWE using Hierarchical Neural Network

Reference 2021

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:55.916346Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c3d143e5-2835-4012-a3a8-43833b7994f0 · outbound

This paper cites ReSpAct: Harmonizing Reasoning, Speaking, and Acting Towards Building Large Language Model-Based Conversational AI Agents.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting ReSpAct: Harmonizing Reasoning, Speaking, and Acting Towards Building Large Language Model-Based Conversational AI Agents

Reference 2022

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.627111Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b3979bdf-9f6e-4b69-b65c-3e4e97cb0781 · outbound

This paper cites Frameworks for Querying Databases Using Natural Language: A Literature Review.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Frameworks for Querying Databases Using Natural Language: A Literature Review

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.347322Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 084bd0b0-62d6-400c-bd10-d6b3261f90af · outbound

This paper cites CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligence.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligence

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.064442Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0150a05d-0931-4a38-aa7d-b870dc710369 · outbound

This paper cites Leshem Choshen, Ariel Gera, Yotam Perlitz, Michal Shmueli-Scheuer, and Gabriel Stanovsky.

Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting Leshem Choshen, Ariel Gera, Yotam Perlitz, Michal Shmueli-Scheuer, and Gabriel Stanovsky

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-04T14:42:56.259736Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation fadfd38b-f307-4367-a530-2dee41952e18 · inbound

The Trap of Trajectory: Towards Understanding and Mitigating Spurious Correlations in Agentic Memory cites this paper.

The Trap of Trajectory: Towards Understanding and Mitigating Spurious Correlations in Agentic Memory Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting

Reference 22

Resolution: verified exact; arxiv_id, observed 2026-05-29T02:04:56.816440Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 38161526-3d1c-4ee6-ba83-c08801fb6a39 · inbound

Operationalizing Cyber Threat Intelligence with GraphRAG cites this paper.

Operationalizing Cyber Threat Intelligence with GraphRAG Benchmarking LLM-Assisted Blue Teaming via Standardized Threat Hunting

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-15T17:55:19.885565Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.