(EC)2: Event-Centric Explainability for Cybersecurity Through Multi-Agent LLM Investigations

Neta Kirmayer, David Tayouri, Andrés Murillo +3

Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational invest…