Paper Citation Record · LEDGER

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs

As of 10 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 2 inbound Pith citation observations for arXiv:2502.02337.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2502.02337 v1

Coverage vector

measured 32 of 32 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-09T12:33:27.275473Z

measured 34 of 34 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-06-28T05:38:03.320374Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-03T21:58:58.740084Z

Reference resolution

32 of 32 outbound references displayed

verified exact1
verified fuzzy1
unresolved29
parse uncertain0
malformed identifier0
metadata mismatch1

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 6c4a5643-53c0-49f3-9b52-2f1da14d28e0 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 1

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.187413Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 66683910-904e-4d34-92c3-8f80e72edc99 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 2

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.082488Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation f59a75d3-a894-4d53-b5bd-309db4195118 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 3

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.049731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5a39d4a3-cff7-4114-b876-b633c2618a6e · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 4

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.039877Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 37162bd7-d289-4642-82ef-af12d2f32768 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.031717Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1a9c5a44-6037-443a-8a65-28b4067fcccf · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:26.692329Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28d02e55-6c7d-493c-bed1-d1922bfef319 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 7

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.017682Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 85491511-39d9-419d-9398-544f9ede0d41 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 8

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:28.008379Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 9523f727-19b5-4377-8c33-35fbe526ea51 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 9

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.999413Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation dcdbb354-c70f-4960-a1cd-682d7ba2c9e5 · outbound

This paper cites BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:26.713384Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 27645ba1-4c56-48ef-b234-7db1f7a04380 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 11

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.979258Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ef0f89d7-5779-4f35-b47f-4635b6d05388 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 12

Resolution: verified exact; raw_fallback, observed 2026-08-09T12:33:27.625796Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 54556ba6-5fdc-4b82-bb00-4fbe4a73f5a5 · outbound

This paper cites CodeBERT: A Pre-Trained Model for Programming and Natural Languages.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs CodeBERT: A Pre-Trained Model for Programming and Natural Languages

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:26.821711Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 09e40d5f-baf0-4c31-9f19-0c1cc894c91a · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 14

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.970391Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation be3ae73a-e1ec-4362-955b-e9925a66abcd · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 15

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.959718Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 3b9da9a9-25f4-4ac8-b1f7-bf5a98615e10 · outbound

This paper cites AI-Driven Guided Response for Security Operation Centers with Microsoft Copilot for Security.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs AI-Driven Guided Response for Security Operation Centers with Microsoft Copilot for Security

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.049967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a59c5115-48d8-4a13-98b7-b7b44cbfa65b · outbound

This paper cites Understanding the planning of LLM agents: A survey.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Understanding the planning of LLM agents: A survey

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.104891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 985edaac-e487-4fa1-9964-45d1f533ed8b · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 18

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.930615Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 594a2b1a-bc47-4308-b5d7-3868b18ea441 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 19

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.864471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c6d15408-4b92-4242-8d1a-abd4d0e9b701 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.228429Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0ad58185-e141-4a9b-855a-961e44aee3a7 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 21

Resolution: metadata mismatch; raw_fallback, observed 2026-08-09T12:33:27.454677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 938d5f6f-2863-4854-a54e-aef6a0a86b58 · outbound

This paper cites TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.247292Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4cd99ba7-0895-474c-98ec-70a24247a8cd · outbound

This paper cites A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.250944Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 06d3cff5-c65e-49ad-8090-9a1b21143c2c · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.254355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c9af953-5928-4f0d-a1c5-063a2691c932 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.257327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e641f5ff-7388-405a-a381-fbb0ea54c2a1 · outbound

This paper cites HuggingFace's Transformers: State-of-the-art Natural Language Processing.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs HuggingFace's Transformers: State-of-the-art Natural Language Processing

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.260567Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 340632f6-8f57-4307-8066-84718b310363 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.264552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cbcaa4b6-da7a-4eb9-8b8b-add6b8f234d4 · outbound

This paper cites ReAct: Synergizing Reasoning and Acting in Language Models.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs ReAct: Synergizing Reasoning and Acting in Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.267953Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6af20f8c-1df0-40c8-8732-1d7740565222 · outbound

This paper cites an unresolved cited work.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs Unresolved cited work

Reference 29

Resolution: unresolved; raw_fallback, observed 2026-08-09T12:33:27.741183Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ab9c8b71-e927-49ee-b792-330073831b6d · outbound

This paper cites AttacKG+:Boosting Attack Knowledge Graph Construction with Large Language Models.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs AttacKG+:Boosting Attack Knowledge Graph Construction with Large Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:27.275473Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30f18143-9e35-40c5-9ef1-5c3f8f88a31f · outbound

This paper cites In European Symposium on Research in Computer Security.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs In European Symposium on Research in Computer Security

Reference 2023

Resolution: verified fuzzy; raw_fallback, observed 2026-08-09T12:33:27.989821Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation a3fc8f0c-9ccd-466e-9ee2-c574b46e6c54 · outbound

This paper cites An Empirical Study on Challenges for LLM Application Developers.

Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs An Empirical Study on Challenges for LLM Application Developers

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-09T12:33:26.695489Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

Observation c8c8e77c-7001-4e84-8a1f-81459f278d3b · inbound

From Attack Simulation to SIEM Rule: Deterministic Detection-as-Code Synthesis with Probe-Level Traceability cites this paper.

From Attack Simulation to SIEM Rule: Deterministic Detection-as-Code Synthesis with Probe-Level Traceability Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs

Reference 12

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T09:06:49.400457Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation bd70f515-c1b1-46e5-996e-9ffa695c6d41 · inbound

Evaluating Open-Source LLMs for Multi-Label ATT&CK Technique Classification on CTI Reports cites this paper.

Evaluating Open-Source LLMs for Multi-Label ATT&CK Technique Classification on CTI Reports Rule-ATT&CK Mapper (RAM): Mapping SIEM Rules to TTPs Using LLMs

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-07-03T21:58:58.742023Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.