@misc{indiciae401a16150d6a,
  title = {Know the Normal, Track the Attack: Context-Grounded and Stateful LLM Investigation over System Provenance},
  author = {Lijie Zheng and Ji He and Ying Wang and Huang Zhang and Yulong Shen},
  year = {2026},
  url = {https://arxiv.org/abs/2609.36494},
  note = {Source identifier: 2609.36494}
}