3 papers
cs.CR2026
HunterAgent: Neuro-Symbolic Attack Trace Reconstruction under Anti-Forensics
Guangze Zhao, Yongzheng Zhang, Weilin Gai +3
Modern alert-triage systems reduce SOC burden by filtering false positives, but flagging a high-risk alert is only the start of incident response. Threat hunting requires reconstru…
cs.CR2025
Information-Dense Reasoning for Efficient and Auditable Security Alert Triage
Guangze Zhao, Yongzheng Zhang, Changbo Tian +3
Security Operations Centers face massive, heterogeneous alert streams under minute-level service windows, creating the Alert Triage Latency Paradox: verbose reasoning chains ensure…
cs.CR2025
TFLAG:Towards Practical APT Detection via Deviation-Aware Learning on Temporal Provenance Graph
Wenhan Jiang, Tingting Chai, Hongri Liu +2
Advanced Persistent Threat (APT) have grown increasingly complex and concealed, posing formidable challenges to existing Intrusion Detection Systems in identifying and mitigating t…