Yiru Gong

GARNET: GoT-Based Alert Reduction and Narrative Event Tracing

Alerts generated by Security Operations Centers (SOCs) are often numerous and scattered, requiring significant effort from security analysts to manage, which severely slows response times. While recent alert correlation graph methods can effectively reduce alert volume, these graphs are often too co