{"as_of":"2026-08-07T10:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b786c64073d6759d456b665514f1ce740a7057e355337ee8505a7f73c6c6453d","coverage":[{"denominator":97,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":97,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T17:30:02.816653Z","state":"measured"},{"denominator":97,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":97,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.10873/citation-record","integrity":"/paper/2507.10873/integrity","json":"/paper/2507.10873/citation-record.json","paper":"/paper/2507.10873"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.132008Z","title":"Fbi releases annual internet crime report,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.132008Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:798288f62bb2dd1270a2a81636ae2023bf6660593c8b077d19dd793983b06088","observation_id":"6d12d57c-732d-4028-bb67-b64018d2764d","resolution":{"observed_at":"2026-08-06T17:29:55.132008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.197894Z","title":"Cyberattacks cost victims more than quadruple the amount hackers pay to execute attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.197894Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c6fc54522d5ba482edc2f8b0acb6719a3c945c16ca85395df8b8153a7b1cb3ec","observation_id":"6523c75f-9cfe-42da-92f3-d0a52837aad7","resolution":{"observed_at":"2026-08-06T17:29:55.197894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.258642Z","title":"Intrusion detection system market size, share, and growth analysis,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.258642Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:4f049c68c3b00104bcf7434964594d9de630277eb9dc66d916037bfe83c6f0a9","observation_id":"c17ede2a-c9e1-49c8-822b-7d938506974b","resolution":{"observed_at":"2026-08-06T17:29:55.258642Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.314421Z","title":"Sok: History is a vast early warning system: Auditing the provenance of system intrusions,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.314421Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:0650e40de1fcf69138689174416b7eaba50f427c14dd2cceaa12be1233334417","observation_id":"30d7a3d9-e0ae-4819-b412-a6bf108b836e","resolution":{"observed_at":"2026-08-06T17:29:55.314421Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.365365Z","title":"Backtracking intrusions,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.365365Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:4cf8eb69037b92abf7e1f3aa57df35b8db95799344778eb2efe735f8ecbd35a2","observation_id":"d0509619-1a87-4c5e-a810-63ec329f3739","resolution":{"observed_at":"2026-08-06T17:29:55.365365Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.442449Z","title":"Nodoze: Combatting threat alert fatigue with automated provenance triage,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.442449Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f7c2bd215f3896194f28f42b3cb53ce982b991c69cc19d71aabf2c50258bc8fb","observation_id":"fa19b7f0-ed25-469c-b907-7e7333aa9f03","resolution":{"observed_at":"2026-08-06T17:29:55.442449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.493585Z","title":"Transparent computing engagement 3,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.493585Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:451e2c922f9fee0c94176e6baba83af82865f19a9206b546f87fbca07e798efb","observation_id":"4ca6dab6-1426-4e26-948c-0241dca3ba8d","resolution":{"observed_at":"2026-08-06T17:29:55.493585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.577168Z","title":"Nodlink repo,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.577168Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:66bf4b4ddce1ea352eed21c87273e1ddbbfaaee92e029fed37a64a2611836947","observation_id":"b8b371cf-84b7-4ebc-9190-b5442c96057b","resolution":{"observed_at":"2026-08-06T17:29:55.577168Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.01341","last_updated":"2023-10-03T16:46:54Z","snapshot_observed_at":"2026-08-07T09:30:25.048465Z","submitted_at":"2023-10-03T16:46:54Z","title":"ATLASv2: ATLAS Attack Engagements, Version 2","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.01341","snapshot_observed_at":"2026-08-06T17:29:55.639072Z","title":"Atlasv2: Atlas attack engagements, version 2,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.639072Z"},"links":{"cited_paper":"/paper/2401.01341","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:7a69926ea54d350ba8a2da329bbe59fa487f808725019cc0b4f2f94d107dbe0f","observation_id":"e6953084-7cd4-4583-b7f8-b72aa8f8e028","resolution":{"observed_at":"2026-08-06T17:29:55.639072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.723736Z","title":"Nodlink: An online system for fine-grained apt attack detection and investigation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.723736Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:adb96d2f7d7178b18c65c8b09f1fe45fe89bcd866db9a77456dc8a612d62f4a7","observation_id":"b982eecd-4760-44d5-bcba-b5d324018a40","resolution":{"observed_at":"2026-08-06T17:29:55.723736Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.796781Z","title":"AIRTAG: Towards automated attack investigation by unsupervised learning with log texts,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.796781Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c3fd322eac85209de0e7702fbdb529b08614b14401b1aed63e0ef1ec02d4de73","observation_id":"8cc19acd-c948-4b19-bd9d-17406118ca7a","resolution":{"observed_at":"2026-08-06T17:29:55.796781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.838261Z","title":"Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.838261Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:6b0627628a56b7fd5c9336d961e4aa9cc8920ea98de5d4b51e9a1add4e51c3ea","observation_id":"aeea8833-ba95-4413-9f7e-44784368702c","resolution":{"observed_at":"2026-08-06T17:29:55.838261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.889328Z","title":"{MAGIC}: Detecting advanced persistent threats via masked graph representation learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.889328Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3adc56a3135b148fbd42bde34a389aa976b4f2fa618e845943e8c7b7d1d154a3","observation_id":"623022e4-8378-4c6e-b6d3-8181a22b4456","resolution":{"observed_at":"2026-08-06T17:29:55.889328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:55.947179Z","title":"ORTHRUS: Achieving High Quality of At- tribution in Provenance-based Intrusion Detection Systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:55.947179Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:0b620a8a66202b631f72e4fbfbcd4cf8d184e081517d3270da5bf86de20f74e5","observation_id":"545c9ecc-2e4e-49f6-9572-478f6de31323","resolution":{"observed_at":"2026-08-06T17:29:55.947179Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.065803Z","title":"Constructing knowledge graph from cyber threat intelligence using large language model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.065803Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1d280b461331e986c34ec4e0af74c70045124559052446bd3d867e514881b2c8","observation_id":"bf5e56bc-4f91-4d76-8e2b-b6d8ea91d891","resolution":{"observed_at":"2026-08-06T17:29:56.065803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.103099Z","title":"Ctikg: Llm-powered knowledge graph construc- tion from cyber threat intelligence,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.103099Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:ed5d165c66341fcdb2b55b33897518b41c646fe99cbb27d2bce6f8552c995cc0","observation_id":"7a406207-4c56-40e2-ae19-6cb03fdc8a7d","resolution":{"observed_at":"2026-08-06T17:29:56.103099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.187713Z","title":"Towards a scalable ai- driven framework for data-independent cyber threat intelligence infor- mation extraction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.187713Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:17fd021803520659be65594d78085cb605d261756e5e16f70184a4e49f70834d","observation_id":"93335473-a017-433b-8f41-3ab5b9979eeb","resolution":{"observed_at":"2026-08-06T17:29:56.187713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.00556","last_updated":"2024-08-31T23:05:56Z","snapshot_observed_at":"2026-07-06T19:08:44.269514Z","submitted_at":"2024-08-31T23:05:56Z","title":"FADE: Few-shot/zero-shot Anomaly Detection Engine using Large Vision-Language Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.00556","snapshot_observed_at":"2026-08-06T17:29:56.288957Z","title":"Fade: Few-shot/zero-shot anomaly detection engine using large vision-language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.288957Z"},"links":{"cited_paper":"/paper/2409.00556","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:d0edd1751b2a97f03a49f8258532dbb2bc7558f3fc56cf10227c52abb8075b35","observation_id":"fd88ed37-f2a7-497e-82d0-64acd31024f0","resolution":{"observed_at":"2026-08-06T17:29:56.288957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.333428Z","title":"Ad-llm: Benchmarking large language models for anomaly detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.333428Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:be26bd2ad30fa6ebb4cae685fdcf46feb55572bf585b3468d1980eb35031db9a","observation_id":"b3e86ec5-7273-4cfe-b4ed-bdb0816f2efc","resolution":{"observed_at":"2026-08-06T17:29:56.333428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.10350","last_updated":"2024-02-15T22:43:02Z","snapshot_observed_at":"2026-08-02T05:48:26.880299Z","submitted_at":"2024-02-15T22:43:02Z","title":"Large Language Models for Forecasting and Anomaly Detection: A Systematic Literature Review","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.10350","snapshot_observed_at":"2026-08-06T17:29:56.413683Z","title":"Large language models for forecasting and anomaly detec- tion: A systematic literature review,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.413683Z"},"links":{"cited_paper":"/paper/2402.10350","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c37c8416c48edc117e03956df9a616ec0c38e280a47ded949ef42540a626403e","observation_id":"e96cca0f-90d4-465e-92f9-d8d967935606","resolution":{"observed_at":"2026-08-06T17:29:56.413683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16308","last_updated":"2024-06-24T04:17:03Z","snapshot_observed_at":"2026-08-01T01:43:11.674745Z","submitted_at":"2024-06-24T04:17:03Z","title":"Anomaly Detection of Tabular Data Using LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.16308","snapshot_observed_at":"2026-08-06T17:29:56.482589Z","title":"Anomaly detection of tabular data using llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.482589Z"},"links":{"cited_paper":"/paper/2406.16308","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:89c5b1d08284305d66c76a74dfa38aba4e859a9388c7f8f1ec47f6c84936e03d","observation_id":"5ebc9c72-4215-4167-a6e4-2c4fba8df154","resolution":{"observed_at":"2026-08-06T17:29:56.482589Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.09558","last_updated":"2023-09-18T08:13:01Z","snapshot_observed_at":"2026-07-06T16:19:49.730653Z","submitted_at":"2023-09-18T08:13:01Z","title":"Summarization is (Almost) Dead","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.09558","snapshot_observed_at":"2026-08-06T17:29:56.545032Z","title":"Summarization is (almost) dead,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.545032Z"},"links":{"cited_paper":"/paper/2309.09558","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f5245762785546f8d7d7fb0e6465613126975b9d41dd1e80fc194c56ab936b8d","observation_id":"331f0a74-7f7d-4b0e-a2f1-f3b7fed78823","resolution":{"observed_at":"2026-08-06T17:29:56.545032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.614158Z","title":"Lost in the middle: How language models use long contexts,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.614158Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b1d1bf8a183269e122ec06e06bc2fb59e6144fa70dc302086b9b7d7907f79173","observation_id":"0ce1a4af-8ee7-45cd-b8cf-ae2d2638b62b","resolution":{"observed_at":"2026-08-06T17:29:56.614158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2001.01525","last_updated":"2020-01-14T12:26:28Z","snapshot_observed_at":"2026-07-06T08:48:42.031197Z","submitted_at":"2020-01-06T12:42:51Z","title":"UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.01525","snapshot_observed_at":"2026-08-06T17:29:56.676292Z","title":"Unicorn: Runtime provenance-based detector for advanced persistent threats,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.676292Z"},"links":{"cited_paper":"/paper/2001.01525","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:545ca273d3c4ad6aa3f49efa0dcf082092c9251782b6ae4b0c9346d6746bc759","observation_id":"74a3cc14-fef0-4b38-964a-d0098fadd308","resolution":{"observed_at":"2026-08-06T17:29:56.676292Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.739178Z","title":"{PROGRAPHER}: An anomaly detection system based on provenance graph embedding,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.739178Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:75d52ec9b8839f36ac9fe3abb768329a2e69eba93ac2ef6661d4c0a8737d4d7e","observation_id":"bf37aa4d-06d2-4aae-a1aa-1a02a9152312","resolution":{"observed_at":"2026-08-06T17:29:56.739178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.785201Z","title":"Masked au- toencoders are scalable vision learners,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.785201Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:67ab601476de1e3e5315c0caea0afff038bbe7ab49c992557d03295b5ca15694","observation_id":"11ef014e-e86d-4c34-8c6d-cd3d309f6229","resolution":{"observed_at":"2026-08-06T17:29:56.785201Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.555152Z","title":"Madeline: Continuous and low-cost monitoring with graph-free representations to combat cyber threats,","venue":null,"work_id":"22ea18af-969c-49f6-881a-83783eefa690","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.865512Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:822b6446912118145d6b3caca68669749fd95d42b1926ccdbb3a4747f133d965","observation_id":"60c9746d-03ac-447f-bc67-64260f9c7636","resolution":{"observed_at":"2026-08-06T17:30:12.562372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:56.925805Z","title":"Retrieval- augmented generation for knowledge-intensive nlp tasks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:56.925805Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:45217aaa529c6ae928a5d09ceca2dd43362a4a87d79080ebd4b840d2ea78f07d","observation_id":"cc1c0220-5d7e-4535-94a3-fb112c784bac","resolution":{"observed_at":"2026-08-06T17:29:56.925805Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.495913Z","title":"Enterprise tactics,","venue":null,"work_id":"18f5d44c-e70e-41d5-a464-46025484379f","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.014605Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:46a4225bc513af90def866aba19de6ccdde93fcf7855211c98d1dd241b559fe8","observation_id":"51002c21-5f6b-4241-8a21-0d8ffcbff21e","resolution":{"observed_at":"2026-08-06T17:30:12.503913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.454515Z","title":"Sometimes, you aren’t what you do: Mimicry attacks against provenance graph host intrusion detection systems,","venue":null,"work_id":"a5ba5171-3e87-40a1-aa77-8e9691c40ae4","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.113337Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:65f7c8fc423f28431b80a4c5d385197f3124670a4b515200e0c193af6674c6e3","observation_id":"bc32f1d4-dc46-47d5-a50b-267e33b5b469","resolution":{"observed_at":"2026-08-06T17:30:12.476864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.411156Z","title":"Winodws event tracing,","venue":null,"work_id":"a63de8e8-45bf-4cca-9822-1b8c6aa17d5a","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.158829Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5a76ed8645f01f8f91d1d346cac70d878a359ef1b00d88eafa28e27fa354e411","observation_id":"3b481f37-8303-48ef-a26a-8ba2125f3ffe","resolution":{"observed_at":"2026-08-06T17:30:12.423358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:57.198668Z","title":"Linux audit,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.198668Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:97900d24cd3322d283aff851f153dc0a98de5d994ce153c69d6491c2403cebc7","observation_id":"755523ac-d889-40ce-a0a1-2f104bcdf38f","resolution":{"observed_at":"2026-08-06T17:29:57.198668Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.312966Z","title":"Dtrace on freebsd,","venue":null,"work_id":"ed29b80e-c552-431f-98a4-350ec3dba568","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.248180Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:771f1631c61bb99ed1441d7915cda23116c79fea01fca9c3c53c184ebc2ad562","observation_id":"9c29804e-a6de-465c-ac18-235013060c9c","resolution":{"observed_at":"2026-08-06T17:30:12.325727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.278844Z","title":"Cyber kill chain,","venue":null,"work_id":"1d65f113-ce86-4b1a-82f1-21c7041bfd76","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.315933Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1cf48109d497ca1ad2ec4762b9560ba62e19a286a4905d90e5f184c4fd30a61e","observation_id":"a002069e-9c4c-46d4-ae91-0803156ac044","resolution":{"observed_at":"2026-08-06T17:30:12.288133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.201989Z","title":"Are we there yet? an industrial viewpoint on provenance-based endpoint detection and response tools,","venue":null,"work_id":"a57861de-75e2-4404-82d3-01e93db1b70e","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.398158Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:08a2ac9e135b8d3d0688b7b53b281439b40163abe262883aa8066e83cb31f384","observation_id":"cc6477c2-121c-4282-8096-f91c6c1b3068","resolution":{"observed_at":"2026-08-06T17:30:12.260681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:12.004061Z","title":"Provenance-aware tracing ofworm break-in and contaminations: A process coloring approach,","venue":null,"work_id":"f85d00d2-648d-4dd2-b122-a910f453f9d4","year":2006},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.478180Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:678a8a574089484adc34cf0672fd27490d2efc22d3ff7213015e2271dd775063","observation_id":"c1032364-5510-4dbb-b061-5e3c2452bacb","resolution":{"observed_at":"2026-08-06T17:30:12.077735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.751441Z","title":"High fidelity data reduction for big data security dependency analyses,","venue":null,"work_id":"24979696-9c36-4e87-9a40-0e196fd874a8","year":2016},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.571013Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:aa769e09b35bdddbc62a76955fe7c93d366f5533002336e0b58aa817b51a88a2","observation_id":"32c66bed-caba-470f-aee0-6ff34b60efd1","resolution":{"observed_at":"2026-08-06T17:30:11.864469Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.610261Z","title":"Can data provenance put an end to the data breach?","venue":null,"work_id":"fefc3063-6281-4369-8c12-383ac966ec28","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.637912Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:8fc5fa8e4928b284ca8b83d52f00789b4e1dc4fea557456ac3f4d7f74d01fbaf","observation_id":"a95a7223-8937-4830-b9d2-edec0269356a","resolution":{"observed_at":"2026-08-06T17:30:11.676377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.476016Z","title":"Towards a timely causality analysis for enterprise security,","venue":null,"work_id":"4ff6b07c-a417-42ff-8110-19a8e89a27a0","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.694250Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:09628b8cdfa2fb1f84049ff18a47cd59e247a5dc93fbb260840f14641534a497","observation_id":"efbaca8d-d3a6-4b6a-a653-5e9d6da35801","resolution":{"observed_at":"2026-08-06T17:30:11.531480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.328488Z","title":"Holmes: real-time apt detection through correlation of suspicious information flows,","venue":null,"work_id":"220dad16-dfc8-4c61-a04c-b419fdb79ba3","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.767033Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:95e36b893cfb040319673fb176322f991bb5366cba82a96b30afc340ddafa375","observation_id":"21994383-d6a5-4a8d-ae78-7cc93587e33a","resolution":{"observed_at":"2026-08-06T17:30:11.394444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.211018Z","title":"Combating dependence ex- plosion in forensic analysis using alternative tag propagation semantics,","venue":null,"work_id":"3c0a4b72-7db1-44f9-8c4c-ea64e809ae96","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.842744Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:b24d9900369d3a11f65be369515f3aa1741dfd2fe9f152d861b55ffedc87c0d3","observation_id":"cbeebed0-74d1-48ee-a866-766b6bff6071","resolution":{"observed_at":"2026-08-06T17:30:11.269314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:11.050326Z","title":"Nodemerge: Template based efficient data reduction for big-data causality analysis,","venue":null,"work_id":"a2dd73d7-36dd-4e48-bfb7-679edece994b","year":2018},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.892251Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a399d439eb674c1c74162f37cf0cb8ca35407b0008d9ddff0889a7db514e9020","observation_id":"a636947d-19e2-49b2-a320-d78491761ad7","resolution":{"observed_at":"2026-08-06T17:30:11.093865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.923245Z","title":"{SEAL}: Storage- efficient causality analysis on enterprise logs with query-friendly com- pression,","venue":null,"work_id":"05246620-b817-4eba-8f42-f02570404292","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:57.993856Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c53e4ec9f76df93377ac425fff2e2725e4ad19b15cd2437dafacf53c47ec1909","observation_id":"b2ac9bd9-f63d-4626-966c-5eaf91cde3ea","resolution":{"observed_at":"2026-08-06T17:30:11.001851Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.779143Z","title":"The case for learned provenance graph storage systems,","venue":null,"work_id":"72baba3e-6279-4dfd-bcf1-752c48328e91","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.044421Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a6c2e488d8042f47fdfdc11b5acec763b34b401a48c62fa24ba59a4c138e9f40","observation_id":"1ab11741-c766-43ea-97c8-65bc9d4804af","resolution":{"observed_at":"2026-08-06T17:30:10.837763Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.634234Z","title":"Tactical provenance analysis for endpoint detection and response systems,","venue":null,"work_id":"bf1dfa90-2dae-4a8f-9276-8a57b1472036","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.126512Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:48378d235df9391585769e371938e87a5c373dfeda304a1ffa95f9993f12d01e","observation_id":"4c64684a-b93e-422a-9db1-e5cb21cc8751","resolution":{"observed_at":"2026-08-06T17:30:10.693697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.494071Z","title":"Alchemist: Fusing application and audit logs for precise attack provenance without instrumentation,","venue":null,"work_id":"74b5d7bf-36c7-481a-bc9c-9d0ae3ff2452","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.196404Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c4ce7a3d34fcca638b4be903e7bb931f10ee356b9481c59bb4adb27d3de9efd1","observation_id":"c55b2174-36bc-4d45-b1ce-2c3e572f58c0","resolution":{"observed_at":"2026-08-06T17:30:10.559253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.05034","last_updated":"2023-09-28T03:02:57Z","snapshot_observed_at":"2026-07-06T16:04:26.461227Z","submitted_at":"2023-08-09T16:04:55Z","title":"Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.05034","snapshot_observed_at":"2026-08-06T17:29:58.331185Z","title":"Kairos: Practical intrusion detection and investigation using whole-system provenance,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.331185Z"},"links":{"cited_paper":"/paper/2308.05034","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5c9aeccebf9202d03ba0f72d29facc520efc5a25571c33a9834c662daa0096a4","observation_id":"a14968af-ddc0-4579-8a48-b001a6daf866","resolution":{"observed_at":"2026-08-06T17:29:58.331185Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.337218Z","title":"R-caid: Embedding root cause analysis within provenance-based intrusion detection,","venue":null,"work_id":"ec0d74ab-0fe4-4ad9-8e78-4b2cfaeb6431","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.397703Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f75c450f736420fe1708ff1416e25cad3e7f99e5612ecddfc04737f0e7d40b0b","observation_id":"2a0b26fc-6f60-4aae-b79f-1c7d60d56c35","resolution":{"observed_at":"2026-08-06T17:30:10.419230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:10.044047Z","title":"Shadewatcher: Recommendation-guided cyber threat analysis using system audit records,","venue":null,"work_id":"7e97d12d-6909-4a4f-8c68-5bad8feaf0c1","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.480167Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3108ed5975b15d7a65f48d8b9afc330082ed7f212f25cfb932a37ce98fc99116","observation_id":"cd355c83-bf6e-49ac-acd8-6374431c1444","resolution":{"observed_at":"2026-08-06T17:30:10.202376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.735869Z","title":"SIGL: securing software installations through deep graph learning,","venue":null,"work_id":"577df186-0288-489c-9e08-c4aea7319d8d","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.581410Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5ffc096eeb9e71c75acabb50538dff7ebfd479858f0dd9e24f06b36c131aab6c","observation_id":"e674b14c-49a4-48d4-afc8-cea022764d6c","resolution":{"observed_at":"2026-08-06T17:30:09.784335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.550849Z","title":"Darpa tc engagement 3 ground-truth,","venue":null,"work_id":"b4e9e792-91d3-482a-91d3-09ad89f9fbe8","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.661412Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:739887dc7c8f65c368cf67eb654fca0caea57baaecfa8ebfb6df74e97ec0a63d","observation_id":"4e0ca736-a786-4bc4-acbe-51fb416f1b0a","resolution":{"observed_at":"2026-08-06T17:30:09.643516Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.14487","last_updated":"2024-05-23T12:19:07Z","snapshot_observed_at":"2026-07-06T18:18:34.617427Z","submitted_at":"2024-05-23T12:19:07Z","title":"A Comprehensive Overview of Large Language Models (LLMs) for Cyber Defences: Opportunities and Directions","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.14487","snapshot_observed_at":"2026-08-06T17:29:58.767171Z","title":"A comprehensive overview of large lan- guage models (llms) for cyber defences: Opportunities and directions,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.767171Z"},"links":{"cited_paper":"/paper/2405.14487","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:43dfda7ec889723ae3ce432e282952b4ed360ff1ea892f95e81452593b52b575","observation_id":"eb275d39-3a86-4342-8385-8eff66bc6596","resolution":{"observed_at":"2026-08-06T17:29:58.767171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.01038","last_updated":"2024-03-02T00:10:45Z","snapshot_observed_at":"2026-08-06T23:34:33.998103Z","submitted_at":"2024-03-02T00:10:45Z","title":"AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.01038","snapshot_observed_at":"2026-08-06T17:29:58.851040Z","title":"Autoattacker: A large language model guided system to implement automatic cyber-attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.851040Z"},"links":{"cited_paper":"/paper/2403.01038","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:25534ff0c6f2da670ef1c53dffd91fcc0f42158485f59fd92e17aae30dc678aa","observation_id":"50cf2013-9dd2-4a06-b1de-2683af952af4","resolution":{"observed_at":"2026-08-06T17:29:58.851040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.343404Z","title":"{PentestGPT}: Evaluating and harnessing large language models for automated penetration testing,","venue":null,"work_id":"7e84550a-0aba-453f-bbf1-55b4269a363e","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:58.977515Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:499b7864404cca9bf14e862c742a1c1a23ee7ec2b63605b683a7e869c45e22c1","observation_id":"e00dd72d-9c72-4f3d-a575-cdf0b69b69b4","resolution":{"observed_at":"2026-08-06T17:30:09.436223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.047072Z","title":"Large language model guided protocol fuzzing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.047072Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:febb7776c26b32f040a77fbfc623f1390be9bd4154b881f964700596acbee8b3","observation_id":"a13b05ca-5738-4d33-9109-b90f79215757","resolution":{"observed_at":"2026-08-06T17:29:59.047072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:09.101361Z","title":"Exploring {ChatGPT’s} capabilities on vulnerability management,","venue":null,"work_id":"72f649a2-07cb-4e26-a904-81243cb1efa6","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.121697Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:7df641f06489097ad7cfd0dac86a87577cfaa3014eaa5a679614f7638e342109","observation_id":"fa90e2fd-1840-47a0-ab46-5aaa40e79302","resolution":{"observed_at":"2026-08-06T17:30:09.208433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.02074","last_updated":"2024-09-03T17:22:00Z","snapshot_observed_at":"2026-08-07T03:43:25.013484Z","submitted_at":"2024-09-03T17:22:00Z","title":"RACONTEUR: A Knowledgeable, Insightful, and Portable LLM-Powered Shell Command Explainer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.02074","snapshot_observed_at":"2026-08-06T17:29:59.187409Z","title":"Raconteur: A knowledgeable, insightful, and portable llm-powered shell command explainer,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.187409Z"},"links":{"cited_paper":"/paper/2409.02074","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3e96bc2ff47e49cae4536d8af522a8b97d302658635309ebf022171e88337c26","observation_id":"9f848941-9faf-4cab-8752-77b90f8a62cb","resolution":{"observed_at":"2026-08-06T17:29:59.187409Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.259554Z","title":"Deeplog: Anomaly detection and diagnosis from system logs through deep learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.259554Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:660dee648a9a1e8f47f3bd245b9f6fdd8dc7d2b61c2f2510ad7a42a652277f3e","observation_id":"8672f890-1202-4141-958f-caa8166b5092","resolution":{"observed_at":"2026-08-06T17:29:59.259554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.866365Z","title":"Log2vec: A heterogeneous graph embedding based approach for detecting cyber threats within enterprise,","venue":null,"work_id":"e72b20b2-c405-4b90-bdec-46062ef5edf4","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.331971Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1cc84d262d46a8e7f63f602a595552cac89eab3c4a397eed9944687a6c8faa70","observation_id":"8173209c-0ee5-4ae3-bf7d-aae14f1b27b0","resolution":{"observed_at":"2026-08-06T17:30:08.963852Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.684869Z","title":"{ATTACK2VEC}: Leveraging temporal word embeddings to understand the evolution of cyberattacks,","venue":null,"work_id":"8a68728b-9900-4429-be21-af81b5b05c6b","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.388082Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:48fbcb5868df797b00aa01c059e81e00462f9e6b70f2be68d8650e004e094696","observation_id":"cc428afa-144e-4f12-886a-9a40a3e882d4","resolution":{"observed_at":"2026-08-06T17:30:08.778686Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.475590Z","title":"Semantic anomaly detection with large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.475590Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bd1e79d14e694677f8eb8ab3c4201bfe0af205a59cc5862631e7b013bf70116f","observation_id":"47815c30-c1c6-4137-b7f2-f6359a5f3231","resolution":{"observed_at":"2026-08-06T17:29:59.475590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.494721Z","title":"tiktoken,","venue":null,"work_id":"479b7d42-79ae-4713-8b3e-0b219cb348ca","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.548683Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c98681134ebbe0791e9220f1892ad21f60f59563af6596e34e01db497393894e","observation_id":"0ebfde0e-8156-416d-bf86-6f6f17022f13","resolution":{"observed_at":"2026-08-06T17:30:08.548005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05167","last_updated":"2025-07-09T14:35:23Z","snapshot_observed_at":"2026-08-07T05:51:25.138811Z","submitted_at":"2025-02-07T18:49:46Z","title":"NoLiMa: Long-Context Evaluation Beyond Literal Matching","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05167","snapshot_observed_at":"2026-08-06T17:29:59.630413Z","title":"Nolima: Long-context evaluation beyond literal matching,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.630413Z"},"links":{"cited_paper":"/paper/2502.05167","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f8f1791f31d6024598e28bd6a9a6bbf87a510ee4335609a081f82062482a1757","observation_id":"3d985bc1-cec7-44e5-919f-670e01084ff8","resolution":{"observed_at":"2026-08-06T17:29:59.630413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.328217Z","title":"Fundamental limits of prompt compression: A rate-distortion framework for black-box language models,","venue":null,"work_id":"db104115-74a0-469d-8896-a0035c85f279","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.673991Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:2915cd659927f9815e6ae10c848628fcfeed2737f860bf0d837bc227a1efdbdb","observation_id":"c6ec1f36-3fc1-4e39-87c5-a10f0317f963","resolution":{"observed_at":"2026-08-06T17:30:08.403909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07927","last_updated":"2025-03-16T06:23:34Z","snapshot_observed_at":"2026-08-05T17:55:26.008016Z","submitted_at":"2024-02-05T19:49:13Z","title":"A Systematic Survey of Prompt Engineering in Large Language Models: Techniques and Applications","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07927","snapshot_observed_at":"2026-08-06T17:29:59.766686Z","title":"A systematic survey of prompt engineering in large language models: Techniques and applications,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.766686Z"},"links":{"cited_paper":"/paper/2402.07927","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:42bae02a6e9496839c8b728d83e5fbc9ed5c6feaafb7374957b524079e48ed58","observation_id":"3e9b5f89-4d86-460f-b30e-e4fb93c622a8","resolution":{"observed_at":"2026-08-06T17:29:59.766686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:29:59.821399Z","title":"Chain-of-thought prompting elicits reasoning in large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.821399Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:7569b9f9a8ee12e7a32968ae35b213f7177941527ada03a5135c709aa231ebf0","observation_id":"34dace7f-e0ec-452c-b684-9b55bb187ec7","resolution":{"observed_at":"2026-08-06T17:29:59.821399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2203.11171","last_updated":"2023-03-07T17:57:37Z","snapshot_observed_at":"2026-07-06T12:50:22.773056Z","submitted_at":"2022-03-21T17:48:52Z","title":"Self-Consistency Improves Chain of Thought Reasoning in Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.11171","snapshot_observed_at":"2026-08-06T17:29:59.893803Z","title":"Self-consistency improves chain of thought reasoning in language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T17:29:59.893803Z"},"links":{"cited_paper":"/paper/2203.11171","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c5206064d82aa5e69a6eeb3c5e98df57f562eb3d81a4c01aadaa92aee2b8b94e","observation_id":"37adf0a8-5c73-4ae2-9e9a-ac887b188d38","resolution":{"observed_at":"2026-08-06T17:29:59.893803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:08.107789Z","title":"Custos: Practical tamper-evident auditing of operating systems using trusted execution,","venue":null,"work_id":"46d70327-cae0-4ba8-bbad-306c8314be60","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.030936Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5203c92bb3631c3e2db4a809740b1ce35e3b06256490e68d4f52cf7a38fbd025","observation_id":"61f762c5-d2ae-49be-8a2e-19e6c3018b46","resolution":{"observed_at":"2026-08-06T17:30:08.204888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.944354Z","title":"Auditing frameworks need resource isolation: A systematic study on the super producer threat to system auditing and its mitigation,","venue":null,"work_id":"54a0fab9-5e68-4f93-ac47-7d81ccc26ce2","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.104146Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1af16e4add6a91a72103ef9661f1a8d6ac04646960f28b30eb27ac30aabf4578","observation_id":"5a51d194-754b-4757-8bc0-cff2a5b38694","resolution":{"observed_at":"2026-08-06T17:30:07.998211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.181120Z","title":"Support vector method for novelty detection,","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.181120Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:2eaed485991b2f3c448f74a4640cb890c299adcf623efea12b131010ee57f754","observation_id":"eb7bc96a-190c-4e83-b42a-c7e80283763e","resolution":{"observed_at":"2026-08-06T17:30:00.181120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.248846Z","title":"Bert: Pre-training of deep bidirectional transformers for language understanding,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.248846Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e9d31de4e06096eb1eb33644c62fcb2e5b6405866a1ce114ea2865dbfe2fe25c","observation_id":"5c7022b8-b34e-4229-b239-e6d9f0c42b9b","resolution":{"observed_at":"2026-08-06T17:30:00.248846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.733299Z","title":"bert-base-uncased,","venue":null,"work_id":"60d8ee36-41b2-4ac8-851d-db85d4aaa219","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.328746Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:43856a5e5e2366bd325054deddb8c929d30cc3bfd4e59aa01f74df22e239a857","observation_id":"c26624ca-fdd1-40d9-b51e-14501afc0029","resolution":{"observed_at":"2026-08-06T17:30:07.768556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.12035","last_updated":"2022-10-17T14:08:37Z","snapshot_observed_at":"2026-07-06T13:13:22.359120Z","submitted_at":"2022-05-24T12:43:04Z","title":"RetroMAE: Pre-Training Retrieval-oriented Language Models Via Masked Auto-Encoder","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.12035","snapshot_observed_at":"2026-08-06T17:30:00.412279Z","title":"Retromae: Pre-training retrieval- oriented language models via masked auto-encoder,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.412279Z"},"links":{"cited_paper":"/paper/2205.12035","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:6ad9b33d3898796bec07b08649921c580dedc53debffad40256527b9e84fe06e","observation_id":"99832e11-fd86-4a71-8ce3-a65a9c4bb9ca","resolution":{"observed_at":"2026-08-06T17:30:00.412279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.596292Z","title":"Backtracking intrusions,","venue":null,"work_id":"8cd556bb-218f-4250-938a-d3a93a1737b0","year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.514080Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:08fa3cfa8fb1dd7d422b7bc225f55b9e517ae9507947025cf1a523f8b17a2be1","observation_id":"8d3cd82d-e2ab-4432-be2e-9770047c3b9a","resolution":{"observed_at":"2026-08-06T17:30:07.669440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.413355Z","title":"Representative sam- pling for reliable data analysis: theory of sampling,","venue":null,"work_id":"897f05ed-6244-47ed-9aaa-430dd4a74f3b","year":2005},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.614753Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:599536192805a68a49444b5bd3650d635538d70d69bd154b1e1f239ab27e4acc","observation_id":"264a1406-3a78-4df1-b5ca-3cddd1e5527d","resolution":{"observed_at":"2026-08-06T17:30:07.506534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.259590Z","title":"ATLAS: A sequence-based learning approach for attack investigation,","venue":null,"work_id":"513c0b3c-4e34-420f-b012-e6c02e3c86b6","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.709741Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:0ad5baf089d0c145cdafea176649947dce50f59e2d9c4ca89d493ca0b5800a57","observation_id":"029e3d08-2928-4994-abc7-a1d8f112e856","resolution":{"observed_at":"2026-08-06T17:30:07.310877Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:00.791725Z","title":"Threatrace: Detecting and tracing host-based threats in node level through provenance graph learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.791725Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:95206fbf273a4bac10b388c560a2ef1948723b8ff7357e4f0891596250d7c93d","observation_id":"692a6a49-6875-466f-8ed8-10c6f9a316ae","resolution":{"observed_at":"2026-08-06T17:30:00.791725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:07.045590Z","title":"Mitigating advanced and persistent threat (apt) damage by reasoning with provenance in large enterprise network (marple) program,","venue":null,"work_id":"7740f49a-7bac-4c47-b5f1-3a13211e51cc","year":2019},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.883684Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c32e92607ad14ba78f4b1f3caf5b937a4ce9035b724f649ce8fb558686c3221d","observation_id":"753570f1-183c-4067-b2cf-fff35d4eae1d","resolution":{"observed_at":"2026-08-06T17:30:07.144132Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.815667Z","title":"Atlasv2,","venue":null,"work_id":"cf1a6a61-119b-40ad-8945-cecf972f597b","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:00.985610Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:d3aaf88b2ca8c973802233ba02dcc7480c512dc3159f1366e4e59236fadf47a6","observation_id":"e50e8dec-88b4-4ef6-9dba-5761ca5dfe89","resolution":{"observed_at":"2026-08-06T17:30:06.928481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.557732Z","title":"Flash repo,","venue":null,"work_id":"56ba5d06-6a20-4dcc-8882-593ebff878c4","year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.065685Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5e15db493d58da85f638666b1fab39746efd00a7145ec201b3c6c2bb384457bd","observation_id":"a7444d72-e49e-49ab-ae43-04c093b4fc7e","resolution":{"observed_at":"2026-08-06T17:30:06.668629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.331491Z","title":"Magic repo,","venue":null,"work_id":"d43a4d4a-b83f-4c44-ae74-5ab90af1cb8d","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.196441Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1225159be789c20ebfe45100eecc011bcdec7662c98a3b09bbbbff1c44975717","observation_id":"a05f47ee-be04-4128-bb15-047193a9860c","resolution":{"observed_at":"2026-08-06T17:30:06.402552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:06.074444Z","title":"Orthrus repo,","venue":null,"work_id":"b1cb67d7-bd91-4b99-ae30-bccd030b053e","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.278438Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:12abe18349d04b81bdbff47208e412e08c997adbfd3009fda0d101d4fba8afc1","observation_id":"f24993d7-3ba3-470b-8acf-bc5c0eee970f","resolution":{"observed_at":"2026-08-06T17:30:06.203612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.862661Z","title":"Airtag repo,","venue":null,"work_id":"6dc2f028-7ec6-4558-a79b-9965c891a926","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.330764Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:e569f826b8b49f7c5d12e093f040c1af639a2dec5493b2a7c5db15f09de8111d","observation_id":"2b2b42d8-8271-42bc-822c-d70abc547a4b","resolution":{"observed_at":"2026-08-06T17:30:05.960843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.609846Z","title":"Atlas dataset,","venue":null,"work_id":"5993669e-babe-4650-b848-205484f93c4f","year":2020},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.420613Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f42fccf79f6202a1149698c140d86c724222b5072562b61372027f543b612dcd","observation_id":"7778bf9a-0a31-403c-81b8-ca8c53d90919","resolution":{"observed_at":"2026-08-06T17:30:05.721419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-06T17:30:01.535060Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.535060Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:eb7c1dec2abdb9621db519510309981ab86e11051a368226ab7dfce136e3ee70","observation_id":"29df7f98-d898-4900-8254-af9e293b2e0b","resolution":{"observed_at":"2026-08-06T17:30:01.535060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-08-06T17:30:01.634139Z","title":"The llama 3 herd of models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.634139Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:afcb0ef02e3141b531ceff29ab321c6c2155127b45d7a7b06c40184c52a05a3a","observation_id":"d083c56b-190b-4321-80e5-0bbdf127b5bb","resolution":{"observed_at":"2026-08-06T17:30:01.634139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.447462Z","title":"Openai o3-mini,","venue":null,"work_id":"f0cdeb76-3137-41f6-917f-12e2633d9f64","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.764153Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:5e2872d241ac992ee758edb241669167ac679094492191f03293ebc0570cc029","observation_id":"0cdc90d4-c8ad-4a56-987b-d6b1ef6a9c98","resolution":{"observed_at":"2026-08-06T17:30:05.515588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.245295Z","title":"Sonar reasoning pro,","venue":null,"work_id":"a9831f9e-f7c8-4856-84bb-1cd62a5dbbaa","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.829143Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:bdb0c1024302015ca949431ade42ba762648bb8ac98e2bf2e00b48b5cfd0725a","observation_id":"c6d97db2-39a2-4894-be5a-b09f6bb0919b","resolution":{"observed_at":"2026-08-06T17:30:05.318796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:05.093974Z","title":"all-MiniLM-L6-v2,","venue":null,"work_id":"4925e5dc-c295-499c-8cc9-dbb8cf28c0b4","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:01.932568Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:3db59ec4bb314d4eb57a94ff7318855e3d68adb30617410d7e6708fbb34ad3ea","observation_id":"c5113323-6e29-48b3-8951-d6deba6d9b03","resolution":{"observed_at":"2026-08-06T17:30:05.151212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.00055","last_updated":"2017-07-31T20:12:06Z","snapshot_observed_at":"2026-08-04T03:50:51.013049Z","submitted_at":"2017-07-31T20:12:06Z","title":"SemEval-2017 Task 1: Semantic Textual Similarity - Multilingual and Cross-lingual Focused Evaluation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.00055","snapshot_observed_at":"2026-08-06T17:30:02.021302Z","title":"Semeval- 2017 task 1: Semantic textual similarity-multilingual and cross-lingual focused evaluation,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.021302Z"},"links":{"cited_paper":"/paper/1708.00055","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:c6a939312c8c29bf8a740b9a36ab01b1a9f7990bc3df57e3ba61e25441f22f0f","observation_id":"dccc9578-dceb-4cae-99e2-1e3dcc0cfa48","resolution":{"observed_at":"2026-08-06T17:30:02.021302Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.851616Z","title":"(2025) Api pricing","venue":null,"work_id":"306665d2-558e-450e-8a2e-680db7a3a6e8","year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.137618Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:a12d24be6c660158ac67ae0411dad99534aa18129b8dadc6d576820801d23c5b","observation_id":"53ef3339-c6cc-4ace-8b3a-48db4f1b85d6","resolution":{"observed_at":"2026-08-06T17:30:04.934529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.681233Z","title":"Attacks on deidentification’s defenses,","venue":null,"work_id":"89a8e2b3-db3f-4fdd-9346-202c25124fb2","year":2022},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.256881Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:f5528b5be10502fa34c526748893816704529442bb2cf80d91c309d8098c7f5f","observation_id":"602419b2-44a9-495f-b8f3-f11e16810ccb","resolution":{"observed_at":"2026-08-06T17:30:04.738393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.13372","last_updated":"2024-06-27T22:44:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-03-20T08:08:54Z","title":"LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.13372","snapshot_observed_at":"2026-08-06T17:30:02.345862Z","title":"Llamafactory: Unified efficient fine-tuning of 100+ language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.345862Z"},"links":{"cited_paper":"/paper/2403.13372","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:1dea5cf169bb0503882da4dd73e7ae9ca35d894ae76ad0a72f3a033a2e8f7fff","observation_id":"985fefb7-c75f-4fdc-a66a-c262d885aec3","resolution":{"observed_at":"2026-08-06T17:30:02.345862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.19393","last_updated":"2025-03-01T06:07:39Z","snapshot_observed_at":"2026-07-06T20:29:11.710285Z","submitted_at":"2025-01-31T18:48:08Z","title":"s1: Simple test-time scaling","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.19393","snapshot_observed_at":"2026-08-06T17:30:02.499902Z","title":"s1: Simple test-time scaling,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.499902Z"},"links":{"cited_paper":"/paper/2501.19393","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:64470c98735f8869d058cb3a7cad2326c8fcc3566d9742e3b45a391295d6c33f","observation_id":"d9ca10db-f661-4016-92b3-beff54f075b1","resolution":{"observed_at":"2026-08-06T17:30:02.499902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.13722","last_updated":"2024-10-17T16:27:13Z","snapshot_observed_at":"2026-07-06T19:35:26.421419Z","submitted_at":"2024-10-17T16:27:13Z","title":"Persistent Pre-Training Poisoning of LLMs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.13722","snapshot_observed_at":"2026-08-06T17:30:02.613382Z","title":"Persistent pre-training poisoning of llms,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.613382Z"},"links":{"cited_paper":"/paper/2410.13722","citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:66a5a35800eae51f849c185f674b3fe09caf20c21c415c609f52da24f6340aa1","observation_id":"7172ed78-bb13-4fd4-be47-6d7877ac3bd1","resolution":{"observed_at":"2026-08-06T17:30:02.613382Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.510992Z","title":"Sok: Pragmatic assessment of machine learning for network intrusion detection,","venue":null,"work_id":"0052374c-9a46-47df-a846-0879d61bcbe7","year":2023},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.728879Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:9b0e6f92e6d2720a2c34f32ff46fc6304063fdc8f80eccf44653344c7db2b035","observation_id":"130925ab-1efb-4e0e-a993-56414968dbcb","resolution":{"observed_at":"2026-08-06T17:30:04.575165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T17:30:04.295390Z","title":"A survey on data-driven network intrusion detection,","venue":null,"work_id":"f4e12ede-9ab1-428d-8cf8-24a20642ae25","year":2021},"citing_paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T17:30:02.816653Z"},"links":{"citing_paper":"/paper/2507.10873"},"observation_digest":"sha256:63b627aa6443532a78374f34a9f4caff252647705f71f0ee946ff8986cfb5133","observation_id":"7d98fc00-c8fa-4411-be94-0ae4b934d7d7","resolution":{"observed_at":"2026-08-06T17:30:04.381432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.10873","last_updated":"2025-07-15T00:24:53Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T17:20:32.104586Z","submitted_at":"2025-07-15T00:24:53Z","title":"From Alerts to Intelligence: A Novel LLM-Aided Framework for Host-based Intrusion Detection"},"reference_resolution":{"displayed":97,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":49,"verified_exact":0,"verified_fuzzy":48},"total_outbound_references":97},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 97 of 97 outbound references and 0 inbound Pith citation observations for arXiv:2507.10873."}