Cover Image

Beyond RAG for Cyber Threat Intelligence: A Systematic Evaluation of Graph-Based and Agentic Retrieval

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Hamzic, Dzenan, Skopik, Florian, Landauer, Max, Wurzenberger, Markus, Rauber, Andreas
Format:	Preprint
Published:	2026
Subjects:	Artificial Intelligence Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

CAM-LDS: Cyber Attack Manifestations for Automatic Interpretation of System Logs and Security Alerts
by: Landauer, Max, et al.
Published: (2026)

Introducing a New Alert Data Set for Multi-Step Attack Analysis
by: Landauer, Max, et al.
Published: (2023)

AttackMate: Realistic Emulation and Automation of Cyber Attack Scenarios Across the Kill Chain
by: Landauer, Max, et al.
Published: (2026)

Resource-Aware Deployment Optimization for Collaborative Intrusion Detection in Layered Networks
by: Gómez, André García, et al.
Published: (2026)

AlertBERT: A noise-robust alert grouping framework for simultaneous cyber attacks
by: Karner, Lukas, et al.
Published: (2026)

Red Team Redemption: A Structured Comparison of Open-Source Tools for Adversary Emulation
by: Landauer, Max, et al.
Published: (2024)

Trace of the Times: Rootkit Detection through Temporal Anomalies in Kernel Activity
by: Landauer, Max, et al.
Published: (2025)

Towards Improving IDS Using CTF Events
by: Kern, Manuel, et al.
Published: (2025)

Cyber Threat Intelligence for Artificial Intelligence Systems
by: Krawczyk, Natalia, et al.
Published: (2026)

CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligence
by: Alam, Md Tanvirul, et al.
Published: (2024)

AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence
by: Alam, Md Tanvirul, et al.
Published: (2025)

ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges
by: Lupinacci, Matteo, et al.
Published: (2025)

Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence
by: Meng, Yuqiao, et al.
Published: (2025)

CyberRAG: An Agentic RAG cyber attack classification and reporting tool
by: Blefari, Francesco, et al.
Published: (2025)

Actionable Cyber Threat Intelligence using Knowledge Graphs and Large Language Models
by: Fieblinger, Romy, et al.
Published: (2024)

CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning
by: Deason, Lauren, et al.
Published: (2025)

CTIArena: Benchmarking LLM Knowledge and Reasoning Across Heterogeneous Cyber Threat Intelligence
by: Cheng, Yutong, et al.
Published: (2025)

AI-Driven Cyber Threat Intelligence Automation
by: Shah, Shrit, et al.
Published: (2024)

TITAN: Graph-Executable Reasoning for Cyber Threat Intelligence
by: Simoni, Marco, et al.
Published: (2025)

Large Language Models Are Unreliable for Cyber Threat Intelligence
by: Mezzi, Emanuele, et al.
Published: (2025)

A Critical Review of Common Log Data Sets Used for Evaluation of Sequence-based Anomaly Detection Techniques
by: Landauer, Max, et al.
Published: (2023)

CTINexus: Automatic Cyber Threat Intelligence Knowledge Graph Construction Using Large Language Models
by: Cheng, Yutong, et al.
Published: (2024)

AgenticCyber: A GenAI-Powered Multi-Agent System for Multimodal Threat Detection and Adaptive Response in Cybersecurity
by: Roy, Shovan
Published: (2025)

System Log Parsing with Large Language Models: A Review
by: Beck, Viktor, et al.
Published: (2025)

CyberSentinel: An Emergent Threat Detection System for AI Security
by: Tallam, Krti
Published: (2025)

Countering Autonomous Cyber Threats
by: Heckel, Kade M., et al.
Published: (2024)

ThreatGPT: An Agentic AI Framework for Enhancing Public Safety through Threat Modeling
by: Zisad, Sharif Noor, et al.
Published: (2025)

POLAR: Automating Cyber Threat Prioritization through LLM-Powered Assessment
by: Tang, Luoxi, et al.
Published: (2025)

BARTPredict: Empowering IoT Security with LLM-Driven Cyber Threat Prediction
by: Diaf, Alaeddine, et al.
Published: (2025)

The Hidden Threat in Plain Text: Attacking RAG Data Loaders
by: Castagnaro, Alberto, et al.
Published: (2025)

RAG Security and Privacy: Formalizing the Threat Model and Attack Surface
by: Arzanipour, Atousa, et al.
Published: (2025)

The Use of Large Language Models (LLM) for Cyber Threat Intelligence (CTI) in Cybercrime Forums
by: Clairoux-Trepanier, Vanessa, et al.
Published: (2024)

Technique Inference Engine: A Recommender Model to Support Cyber Threat Hunting
by: Turner, Matthew J., et al.
Published: (2025)

Securing Agentic AI: Threat Modeling and Risk Analysis for Network Monitoring Agentic AI System
by: Zambare, Pallavi, et al.
Published: (2025)

Cyber Defense Benchmark: Agentic Threat Hunting Evaluation for LLMs in SecOps
by: Chona, Alankrit, et al.
Published: (2026)

ExCyTIn-Bench: Evaluating LLM agents on Cyber Threat Investigation
by: Wu, Yiran, et al.
Published: (2025)

Towards Explainable and Lightweight AI for Real-Time Cyber Threat Hunting in Edge Networks
by: Rahmati, Milad
Published: (2025)

TechniqueRAG: Retrieval Augmented Generation for Adversarial Technique Annotation in Cyber Threat Intelligence Text
by: Lekssays, Ahmed, et al.
Published: (2025)

RAG-targeted Adversarial Attack on LLM-based Threat Detection and Mitigation Framework
by: Ikbarieh, Seif, et al.
Published: (2025)

ASTRIDE: A Security Threat Modeling Platform for Agentic-AI Applications
by: Bandara, Eranga, et al.
Published: (2025)