KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis | Paper Citation Record

Observation 6518b8a2-a24e-4209-9197-3c9b906ee120 · outbound

This paper cites ThreatMiner,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ThreatMiner,

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.078877Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2b407f7e-5c4c-450b-bf97-288b87da6509 · outbound

This paper cites Looking Beyond IoCs: Automatically Extracting Attack Patterns from External CTI,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Looking Beyond IoCs: Automatically Extracting Attack Patterns from External CTI,

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.082969Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22417cec-d405-4e68-ac52-4224e363d9be · outbound

This paper cites Lazagne,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Lazagne,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.086247Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d809cdb4-6596-408d-bf8e-bc9adbe7bc35 · outbound

This paper cites ATLAS: A Sequence-based Learning Approach for Attack Investigation,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ATLAS: A Sequence-based Learning Approach for Attack Investigation,

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.089201Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 219a8dc7-8162-46ef-a277-b36af8878c1a · outbound

This paper cites SANDWORM INTRUSION SET CAMPAIGN TARGETING CENTREON SYSTEMS,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis SANDWORM INTRUSION SET CAMPAIGN TARGETING CENTREON SYSTEMS,

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.091966Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 12a0e2c4-8289-410f-bdec-638d899cf9c4 · outbound

This paper cites ProvTalk: Towards Interpretable Multi-level Provenance Analysis in Networking Functions Virtualization (NFV).

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ProvTalk: Towards Interpretable Multi-level Provenance Analysis in Networking Functions Virtualization (NFV)

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.097836Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4d7554a7-caaf-4b8f-b71f-927e5d938bba · outbound

This paper cites Representation learning: A review and new perspectives,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Representation learning: A review and new perspectives,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.100824Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c4276804-3706-497e-b058-c5121a45f7f9 · outbound

This paper cites Multidimensional binary search trees used for associative searching,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Multidimensional binary search trees used for associative searching,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.103467Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8d532b96-983d-419c-97cb-15248edc1c0a · outbound

This paper cites BLACKENERGY & QUEDAGH,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis BLACKENERGY & QUEDAGH,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.106294Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 863b2f01-932a-444e-9626-ca88d3a6d604 · outbound

This paper cites Fast nonparametric clustering with gaussian blurring mean-shift,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Fast nonparametric clustering with gaussian blurring mean-shift,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.108665Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ed31922-c09d-4d42-b276-0701048847a7 · outbound

This paper cites Teamtnt with new campaign aka.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Teamtnt with new campaign aka

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.111309Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 82ba5437-25ed-41e8-b78b-93826ea6816e · outbound

This paper cites ROCKET KIT TEN: A CAMPAIGN WITH 9 LIVES,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ROCKET KIT TEN: A CAMPAIGN WITH 9 LIVES,

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.113674Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7c33590f-8a0d-41a9-8c6e-dc25fc398c90 · outbound

This paper cites Kairos: Practical Intrusion Detection and Investigation using Whole- system Provenance,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Kairos: Practical Intrusion Detection and Investigation using Whole- system Provenance,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.116112Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7422e64-23df-48d1-ad2e-964b3cd3ee98 · outbound

This paper cites GRUBBS: Stata module to perform Grubbs’ test for outliers,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis GRUBBS: Stata module to perform Grubbs’ test for outliers,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.118596Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0a3535b7-ef89-4ae4-ba6f-e47e11f54ab7 · outbound

This paper cites ADV ANCED PERSISTENT THREAT (APT),.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ADV ANCED PERSISTENT THREAT (APT),

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.120950Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ad29e01-c05c-4a5f-afb8-34b6efc7bb97 · outbound

This paper cites A BAZAR OF TRICKS: FOLLOWING TEAM9’S DEVELOPMENT CYCLES,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis A BAZAR OF TRICKS: FOLLOWING TEAM9’S DEVELOPMENT CYCLES,

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.123891Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d3da7bf7-d9c4-4f5d-a7b3-e10d76973a5f · outbound

This paper cites DARPA Transparent Computing Engagement #3,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis DARPA Transparent Computing Engagement #3,

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.126499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f99efd23-042b-4905-aacf-23613412862b · outbound

This paper cites Transparent computing engagement 3 data release,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Transparent computing engagement 3 data release,

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.128796Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6328c636-c23c-45ac-9ef8-f0fd891aa350 · outbound

This paper cites Lifecycle of the Advanced Persistent Threat,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Lifecycle of the Advanced Persistent Threat,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.552842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7ad96bcb-b617-4471-9309-6926425da5ca · outbound

This paper cites AIRTAG: Towards Automated Attack Investigation by Unsupervised Learning with Log Texts,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis AIRTAG: Towards Automated Attack Investigation by Unsupervised Learning with Log Texts,

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.545730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dff4a584-0489-41a7-b8c6-d400f217d9ae · outbound

This paper cites Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Are we there yet? An Industrial Viewpoint on Provenance-based Endpoint Detection and Response Tools,

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.136331Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0fc1f78a-22fb-42c8-ae65-0287a5ffd236 · outbound

This paper cites Elasticsearch,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Elasticsearch,

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.537902Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b03f1d68-7da5-497e-b43b-cece3f758925 · outbound

This paper cites New osx/keydnap malware is hungry for credentials,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis New osx/keydnap malware is hungry for credentials,

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.530811Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ee9e28a6-3ba1-4052-8941-693c6d487714 · outbound

This paper cites FastText. ,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis FastText. ,

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.523654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2b10b21c-17d0-428b-b7f2-edf7577ca5ab · outbound

This paper cites Back-Propagating system dependency impact for attack investigation,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Back-Propagating system dependency impact for attack investigation,

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.517049Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d03bae21-72d1-4490-acc1-8c8d74b9d5ad · outbound

This paper cites APT37(reaper): The overlooked north korean actor,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis APT37(reaper): The overlooked north korean actor,

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.510105Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9bd2476d-b53a-4ed4-9963-3d4bff33ec46 · outbound

This paper cites Apt42: Crooked charms, cons, and compromises,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Apt42: Crooked charms, cons, and compromises,

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.502439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 800d6b84-87bb-4c4d-ae01-3f179b38c55f · outbound

This paper cites An algorithm for finding best matches in logarithmic expected time,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis An algorithm for finding best matches in logarithmic expected time,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.154782Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c7c09b31-b5b2-44b1-b4ba-d50e9e10231d · outbound

This paper cites Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Enabling Efficient Cyber Threat Hunting With Cyber Threat Intelligence,

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.495221Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7fd8e629-964a-4a73-a977-175044abe7a1 · outbound

This paper cites Sometimes, you aren’t what you do: Mimicry attacks against provenance graph host intrusion detection systems,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Sometimes, you aren’t what you do: Mimicry attacks against provenance graph host intrusion detection systems,

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.488142Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9274cc75-3dcd-489f-aa68-31ee694e4bb8 · outbound

This paper cites R-CAID: Embedding Root Cause Analysis within Provenance-based Intrusion Detection,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis R-CAID: Embedding Root Cause Analysis within Provenance-based Intrusion Detection,

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.481227Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e8778a57-20b6-452c-a7df-0b1b873f945e · outbound

This paper cites Project TajMahal – a sophisticated new APT framework,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Project TajMahal – a sophisticated new APT framework,

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.473548Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b0418d28-3d96-4a4d-a6b4-f9676f5bcfa2 · outbound

This paper cites What are advanced persistent threats?.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis What are advanced persistent threats?

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.466394Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a557c800-c15a-40bb-a0b7-044ca1a537de · outbound

This paper cites Tactical Provenance Analysis for Endpoint Detection and Response Systems,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Tactical Provenance Analysis for Endpoint Detection and Response Systems,

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.458461Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation edcce750-49a0-402b-a7b5-482750b9b247 · outbound

This paper cites Nodoze: Combatting threat alert fatigue with automated provenance triage,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Nodoze: Combatting threat alert fatigue with automated provenance triage,

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.451454Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7d02504b-8712-41d5-b8c2-b2529633cd05 · outbound

This paper cites This is why we can’t cache nice things: Lightning-fast threat hunting using suspicion-based hierarchical storage,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis This is why we can’t cache nice things: Lightning-fast threat hunting using suspicion-based hierarchical storage,

Reference 36

Resolution: metadata mismatch; raw_fallback, observed 2026-08-05T05:14:57.736463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8ba04fc5-47fd-48a2-a775-d75f75e91e29 · outbound

This paper cites TTPDrill: Automatic and Accurate Extraction of Threat Actions from Unstructured Text of CTI Sources,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis TTPDrill: Automatic and Accurate Extraction of Threat Actions from Unstructured Text of CTI Sources,

Reference 37

Resolution: metadata mismatch; raw_fallback, observed 2026-08-05T05:14:57.651036Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 35fd1632-09ac-4d66-8f8b-62c30806955f · outbound

This paper cites MAGIC: Detecting advanced persistent threats via masked graph representation learning,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis MAGIC: Detecting advanced persistent threats via masked graph representation learning,

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.443601Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b6ae417c-680d-4104-acdb-cc7733fa121f · outbound

This paper cites Sharing cyber threat intelligence: Does it really help?.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Sharing cyber threat intelligence: Does it really help?

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.436107Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 280d9439-a3d1-46ce-9d27-edb237b74570 · outbound

This paper cites Cyberwar in Ukraine leads to all-time-high levels of DDoS attacks,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Cyberwar in Ukraine leads to all-time-high levels of DDoS attacks,

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.428639Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fb284494-6a44-40fa-be77-032cb5dc4c4a · outbound

This paper cites Virus.MSWord.Aos,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Virus.MSWord.Aos,

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.421071Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 430de44f-c3b8-4ba5-bf0d-b8aa889c11d8 · outbound

This paper cites An integrated cyber security risk management framework and risk predication for the critical infras- tructure protection,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis An integrated cyber security risk management framework and risk predication for the critical infras- tructure protection,

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.413530Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e661bf64-31b5-47d0-b1f2-138e9900815c · outbound

This paper cites NODLINK: An Online System for Fine-Grained APT Attack Detection and Investigation.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis NODLINK: An Online System for Fine-Grained APT Attack Detection and Investigation

Reference 43

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.405679Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4beaf113-8261-4562-abcf-1f1c39a53232 · outbound

This paper cites AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reports,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reports,

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.194092Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0d0d65e3-672c-49ae-8841-a4eda7857484 · outbound

This paper cites TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning,

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.196505Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9a51c0b-04a2-496c-a879-9c85fc7e3bd2 · outbound

This paper cites MANDIANT Threat Intelligence,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis MANDIANT Threat Intelligence,

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.398452Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7cb0b490-97fc-455f-91e3-daf0900e11b5 · outbound

This paper cites This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits,

Reference 47

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.383399Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 27505d5e-4276-4612-8893-04ae76fef14e · outbound

This paper cites Available: https://www.mandiant.com/advantage/threa t-intelligence/.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Available: https://www.mandiant.com/advantage/threa t-intelligence/

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.391317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bedf2657-9724-4337-8e34-4005e5ad4333 · outbound

This paper cites Unc3524: Eye spy on your email,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Unc3524: Eye spy on your email,

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.366724Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 06ae9107-9105-43b9-9eec-a5ed1f9d2ea3 · outbound

This paper cites APT41, A DUAL ESPIONAGE AND CYBER CRIME OPERATION,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis APT41, A DUAL ESPIONAGE AND CYBER CRIME OPERATION,

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.375012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 28379ba1-4483-45c8-92d3-86e85aa420d4 · outbound

This paper cites Cyber Security & Threat Intelligence Webinars,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Cyber Security & Threat Intelligence Webinars,

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.352272Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d6ff1e40-caec-46d6-9fa0-a5e0759126fd · outbound

This paper cites Apt43: North korean group uses cybercrime to fund espionage operations,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Apt43: North korean group uses cybercrime to fund espionage operations,

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.359117Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e17e544f-6182-4ca4-94d3-47db32deb26f · outbound

This paper cites ETW events in the common language runtime,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ETW events in the common language runtime,

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.330711Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 312edd54-e3ae-4e99-9736-1934d79d8dc7 · outbound

This paper cites Targeted attack lifecycle,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Targeted attack lifecycle,

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.344167Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 32464af5-20a3-44e1-a8ce-a6ca85a07719 · outbound

This paper cites Available: https://www.mandiant.com/resources/insight s/targeted-attack-lifecycle/.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Available: https://www.mandiant.com/resources/insight s/targeted-attack-lifecycle/

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.337448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bc83f7d4-0d78-4699-ad73-3834ac30fbd4 · outbound

This paper cites HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows,

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.316803Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6ac5de4b-d26b-4a10-b8d0-61130087cc9f · outbound

This paper cites Efficient estimation of word representations in vector space,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Efficient estimation of word representations in vector space,

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.323787Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9e5da44f-603f-4ba4-9c0f-4b093a3f3f91 · outbound

This paper cites POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting,

Reference 58

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.225376Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 07a65480-3215-4ffc-9561-b2c5e7ab687f · outbound

This paper cites Structured threat information expression,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Structured threat information expression,

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.295683Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 784dbcc6-a29f-4ed9-af45-d77917420b6c · outbound

This paper cites MITRE ATT&CK,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis MITRE ATT&CK,

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.309677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d635c793-576c-4a2b-9847-794cd12d65eb · outbound

This paper cites MITRE ATT&CK Tactic,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis MITRE ATT&CK Tactic,

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.302396Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b7ebdd0d-4e6e-4e8d-97da-75b344dddafc · outbound

This paper cites CVE-2024-28085 Detail,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis CVE-2024-28085 Detail,

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.266475Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 75ca5d42-5343-4ef7-bfc0-b5dd8731824c · outbound

This paper cites Available: https://stixproject.github.io/.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Available: https://stixproject.github.io/

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.287938Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation aa022351-c54d-42f0-b02a-b51ee57f36f9 · outbound

This paper cites NICKEL targeting government organizations across Latin America and Europe,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis NICKEL targeting government organizations across Latin America and Europe,

Reference 64

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.280417Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation eb63011e-681d-4856-ab97-79285a08ee79 · outbound

This paper cites CVE-2023-22809 Detail,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis CVE-2023-22809 Detail,

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.273350Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 15179baa-ce30-45d3-82de-23a2e8fcf15c · outbound

This paper cites A Topological Approach to Hierarchical Segmentation using Mean Shift,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis A Topological Approach to Hierarchical Segmentation using Mean Shift,

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.237744Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 19da984c-6b2f-4698-884a-1908cceb503a · outbound

This paper cites National vulnerability database,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis National vulnerability database,

Reference 67

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.259630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1c02ae89-fa3d-4f3c-baca-093d6b664f67 · outbound

This paper cites Simulated-data,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Simulated-data,

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.252180Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4d2d2459-eca0-42bc-9089-7208067a6c92 · outbound

This paper cites ioc-parser,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis ioc-parser,

Reference 69

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.244672Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 46c053ad-58ed-4e7a-9eca-f6bf34936ea7 · outbound

This paper cites The linux audit framework.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis The linux audit framework

Reference 70

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.216529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fe69e973-e18d-4c4a-b753-171b5a3a4986 · outbound

This paper cites Pymupdf: Python bindings for mupdf,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Pymupdf: Python bindings for mupdf,

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.230671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4883e00e-58f7-4c90-93f7-13f3f0f96cee · outbound

This paper cites What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis What Are the Attackers Doing Now? Automating Cyberthreat Intelligence Extraction from Text on Pace with the Changing Threat Landscape: A Survey,

Reference 72

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.260461Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8871819a-7400-4f50-82d6-26721cdf18c9 · outbound

This paper cites Atomic red team,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Atomic red team,

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.223663Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation cd7d7979-d57a-42dc-95b7-f59ba33ed62f · outbound

This paper cites Extractor: Extracting attack behavior from threat reports,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Extractor: Extracting attack behavior from threat reports,

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.186981Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2b9828df-068d-437d-ae16-0a64d65d3139 · outbound

This paper cites Machine actionable indicators of compromise,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Machine actionable indicators of compromise,

Reference 75

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.208951Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 14d0380a-1f1a-440b-b7b0-7e2150235abc · outbound

This paper cites Apt41 world tour 2021 on a tight schedule,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Apt41 world tour 2021 on a tight schedule,

Reference 76

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.201708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1307d373-e07c-437a-bb42-9ff426189dd2 · outbound

This paper cites Iranian Chafer APT Targeted Air Transportation and Government in Kuwait and Saudi Arabia,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Iranian Chafer APT Targeted Air Transportation and Government in Kuwait and Saudi Arabia,

Reference 77

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.194559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e23005a0-4479-4a67-bf12-9662179acc62 · outbound

This paper cites Darkwatchman: A new evolution in fileless techniques,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Darkwatchman: A new evolution in fileless techniques,

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.156694Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b854b60f-42f1-40e6-b112-1001b71b486c · outbound

This paper cites scikit-learn,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis scikit-learn,

Reference 79

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.179708Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d69e99ab-85f8-4996-87ca-2ad1b0c22ea7 · outbound

This paper cites Executable installers are vulnerable ˆWEVIL (case 7): 7z*.exe allows remote code execution with escalation of privilege,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Executable installers are vulnerable ˆWEVIL (case 7): 7z*.exe allows remote code execution with escalation of privilege,

Reference 80

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.170609Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 477df4f9-0488-47b8-948c-18522de5efd6 · outbound

This paper cites The baffling berserk bear: A decade’s activity targeting critical infrastructure,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis The baffling berserk bear: A decade’s activity targeting critical infrastructure,

Reference 81

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.163602Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 82ca8189-5f04-4557-a058-3bac59bd3a01 · outbound

This paper cites [Online].

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis [Online]

Reference 82

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.120571Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bd1b7a74-9c9b-4ccb-8ae1-64d9054eb11f · outbound

This paper cites Survey of the state of security 2022,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Survey of the state of security 2022,

Reference 83

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.149526Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ca577872-ddbb-4987-bada-63fe76086a2a · outbound

This paper cites Stanford CoreNLP,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Stanford CoreNLP,

Reference 84

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.142696Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 676a09c9-0605-480f-81c6-627943f281c5 · outbound

This paper cites AppleJeus: Analysis of North Korea’s Cryptocurrency Malware,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis AppleJeus: Analysis of North Korea’s Cryptocurrency Malware,

Reference 85

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.097480Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1bf08251-95fd-470a-aaef-a84b50c95d5e · outbound

This paper cites 3 Advanced Persistent Threat (APT) Examples You Should Know About,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis 3 Advanced Persistent Threat (APT) Examples You Should Know About,

Reference 86

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.127855Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 76744656-a76a-480a-9477-173d54a23dcf · outbound

This paper cites Infobert: Improving robustness of language models from an information theoretic perspective,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Infobert: Improving robustness of language models from an information theoretic perspective,

Reference 87

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.082585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 02285be7-519d-42e5-af73-b5936916474d · outbound

This paper cites Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Flash: A comprehensive approach to intrusion detection via provenance graph representation learning,

Reference 88

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.112222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f51631a3-f03c-4bee-aa99-8625d9f813ed · outbound

This paper cites Malware Analysis Report (MAR) - 10135536-B,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Malware Analysis Report (MAR) - 10135536-B,

Reference 89

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.104988Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8a616f15-7ade-4cfe-b5a3-42947e943c2e · outbound

This paper cites SHADEW ATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis SHADEW ATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records,

Reference 90

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.059067Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a1ba2552-0a4e-4146-895b-1ce10dfdd1a1 · outbound

This paper cites Where 2 worlds collide Bringing Mimikatz et al to UNIX,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Where 2 worlds collide Bringing Mimikatz et al to UNIX,

Reference 91

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.090175Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f5875aad-a439-4b48-b825-bbba6cfc1ee9 · outbound

This paper cites You are what you do: Hunting stealthy malware via data provenance analysis.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis You are what you do: Hunting stealthy malware via data provenance analysis

Reference 93

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.075203Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ecab4a37-cb63-4d35-8a26-2a28d7c2d087 · outbound

This paper cites DEPCOMM: Graph Summarization on System Audit Logs for Attack Investigation,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis DEPCOMM: Graph Summarization on System Audit Logs for Attack Investigation,

Reference 94

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.067163Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fbf7e188-9d56-40a4-beb8-46a32f015399 · outbound

This paper cites APTSHIELD: A Stable, Efficient and Real-Time APT Detection System for Linux Hosts,.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis APTSHIELD: A Stable, Efficient and Real-Time APT Detection System for Linux Hosts,

Reference 96

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.049067Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 26dbdab5-78b4-432a-b98a-dc7955435e20 · outbound

This paper cites Available: https://stanfordnlp.github.io/CoreNLP/.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Available: https://stanfordnlp.github.io/CoreNLP/

Reference 2023

Resolution: verified fuzzy; raw_fallback, observed 2026-08-05T05:14:58.135466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1893754d-8e4c-4a14-8514-65b65fe822a4 · outbound

This paper cites Available: https://www.cert.ssi.gouv.fr/uploads/CERTF R-2021-CTI-005.pdf/.

KnowHow: Automatically Applying High-Level CTI Knowledge for Interpretable and Accurate Provenance Analysis Available: https://www.cert.ssi.gouv.fr/uploads/CERTF R-2021-CTI-005.pdf/

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-05T05:14:57.094860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers