{"total":20,"rows":[{"id":"2407.05194","title":"LLMCloudHunter: Harnessing LLMs for Automated Extraction of Detection Rules from Cloud-Based CTI","created":"2024-07-06","cited_by_count":18,"area":null},{"id":"2307.10214","title":"Time for aCTIon: Automated Analysis of Cyber Threat Intelligence in the Wild","created":"2023-07-14","cited_by_count":15,"area":null},{"id":"2407.02528","title":"Actionable Cyber Threat Intelligence using Knowledge Graphs and Large Language Models","created":"2024-06-30","cited_by_count":14,"area":null},{"id":"2410.21060","title":"CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models","created":"2024-10-28","cited_by_count":14,"area":null},{"id":"2509.10858","title":"Large Language Models for Security Operations Centers: A Comprehensive Survey","created":"2025-09-13","cited_by_count":9,"area":null},{"id":"2401.12790","title":"MORPH: Towards Automated Concept Drift Adaptation for Malware Detection","created":"2024-01-23","cited_by_count":8,"area":null},{"id":"2503.23175","title":"Large Language Models Are Unreliable for Cyber Threat Intelligence","created":"2025-03-29","cited_by_count":5,"area":null},{"id":"2503.03170","title":"AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understanding","created":"2025-03-05","cited_by_count":4,"area":null},{"id":"2505.00841","title":"From Texts to Shields: Convergence of Large Language Models and Cybersecurity","created":"2025-05-01","cited_by_count":4,"area":null},{"id":"2410.20287","title":"AI-Driven Cyber Threat Intelligence Automation","created":"2024-10-26","cited_by_count":2,"area":null},{"id":"2507.06252","title":"False Alarms, Real Damage: Adversarial Attacks Using LLM-based Models on Text-based Cyber Threat Intelligence Systems","created":"2025-07-05","cited_by_count":2,"area":null},{"id":"2601.14556","title":"Constructing Multi-label Hierarchical Classification Models for MITRE ATT&CK Text Tagging","created":"2026-01-21","cited_by_count":1,"area":null},{"id":"2605.25836","title":"CTI2TTP: Evidence-Grounded TTP Extraction from Cyber Threat Intelligence via Diverge-then-Converge Verification","created":"2026-05-25","cited_by_count":1,"area":null},{"id":"2607.24563","title":"TRACE-CTI: Auditable Post-Extraction Governance of TTP Claims with Knowledge Graphs","created":"2026-07-27","cited_by_count":1,"area":null},{"id":"2411.18755","title":"Cyber-Attack Technique Classification Using Two-Stage Trained Large Language Models","created":"2024-11-27","cited_by_count":0,"area":null},{"id":"2606.05844","title":"GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks","created":"2026-06-04","cited_by_count":0,"area":null},{"id":"2606.18190","title":"Multi-Source Cybersecurity Logs: An ATT&CK-Labeled Dataset and SLM Evaluation","created":"2026-06-16","cited_by_count":0,"area":null},{"id":"2608.06778","title":"Retrieval-Constrained Policy Optimization for Attack Technique Extraction from Cyber Threat Intelligence","created":"2026-08-07","cited_by_count":0,"area":null},{"id":"2608.13050","title":"Operationalizing Cyber Threat Intelligence with GraphRAG","created":"2026-08-13","cited_by_count":0,"area":null},{"id":"2608.28394","title":"BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence","created":"2026-08-28","cited_by_count":0,"area":null}],"next_cursor":null}