@misc{indiciae8dfc43538df1, title = {DEFENDCLI: \{Command-Line\} Driven Attack Provenance Examination}, author = {Peilun Wu and Nan Sun and Nour Moustafa and Youyang Qu and Ming Ding}, year = {2026}, url = {https://arxiv.org/abs/2508.12553}, note = {Source identifier: 2508.12553} }