LLM-driven Provenance Forensics for Threat Investigation and Detection

Kunal Mukherjee, Murat Kantarcioglu

We introduce PROVSEEK, an LLM-powered agentic framework for automated provenance-driven forensic analysis and threat intelligence extraction. PROVSEEK employs specialized toolchain…