TY  - RPRT
TI  - Know the Normal, Track the Attack: Context-Grounded and Stateful LLM Investigation over System Provenance
AU  - Lijie Zheng
AU  - Ji He
AU  - Ying Wang
AU  - Huang Zhang
AU  - Yulong Shen
PY  - 2026
UR  - https://arxiv.org/abs/2609.36494
ID  - 2609.36494
ER  -