Tag
critical
advisory
LLM-Based Attack Chain Triage by Host
3 rules 4 TTPsThis rule correlates multiple endpoint security alerts from the same host and leverages an LLM to analyze various endpoint activities, determining if they form a coherent attack chain and prioritizing hosts with corroborated malicious behavior.
threat-detection
llm
attack-chain
3r
4t
medium
advisory
LLM Attack Chain Triage by Host - Multiple Alert Correlation
2 rules 1 CVEThis detection logic correlates multiple alerts on a single host to triage potential attack chains targeting Large Language Models (LLMs).
llm
attack-chain
triage
2r
1c