APTInvestBench: Evaluating Autonomous APT Investigation under Varying Telemetry

arXiv:2609.38954 · cs.CR, cs.AI · Submitted 2026-09-30 · Read on arXiv

cs.CR, cs.AI

Submitted: 2026-09-30

Updated: 2026-09-30

Code: https://github.com/darpa-i2o/Transparent-Computing

Terminology

Benchmark — 24× in this paper · explained in 2 episodes
Provenance — 11× in this paper · explained in 3 episodes
Robustness — 11× in this paper · explained in 5 episodes
Actor — 7× in this paper · explained in 3 episodes
Trace — 4× in this paper · explained in 2 episodes
IEEE Symposium on Security and Privacy — 2× in this paper
Large Language Model (LLM) — 2× in this paper · explained in 3 episodes
Representation Learning — 2× in this paper · explained in 2 episodes
Verification — 2× in this paper · explained in 2 episodes
AI Agents — 1× in this paper · explained in 2 episodes
Abstention — 1× in this paper · explained in 1 episode
Accuracy — 1× in this paper · explained in 1 episode
Action Views — 1× in this paper · explained in 1 episode
Adam — 1× in this paper · explained in 2 episodes
Adaptation — 1× in this paper · explained in 1 episode
Agentic System — 1× in this paper · explained in 2 episodes
Core — 1× in this paper · explained in 2 episodes
Few-Shot Learning — 1× in this paper · explained in 4 episodes
RAG — 1× in this paper · explained in 3 episodes
Verifier — 1× in this paper · explained in 2 episodes

Sources

Related papers