arXiv (All)
open access
HESP: Separating What to Probe from When to Stop in Local LLM Alert-Triage Agents
Security operations centers receive far more alerts than analysts can investigate, and organizations that cannot send their telemetry to hosted models must automate triage with small open-weight LLMs on their own hardware. Current LLM agents leave the investigation procedure to the model, and small
Conceptio Open Archive
Analyze & explore related research in Conceptio
Connect this record directly into your research workflow or AI agent. Explore citations across open repositories, query full text, and export structured proof bundles.
This document is indexed with metadata only: full text is not available in the archive for this record. Open the official source ↗
Related documents
- Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks#1011218
- Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems#1116279
- Clarify the User or Verify the World? Uncertainty Routing for Proactive Agents#1116586
- 6 U.S.C. § 981a — Pilot integrated scanning system#559318
- Cybersecurity Awareness: A Critical Analysis of Education and Law Enforcement Methods#679305
Record · ID 1118158
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Retrieved via Conceptio: every document is proof-bundled with source, license, and retrieval metadata.
Bring this data into your agent: Connect via MCP or API · 20 free credits to start · no card required
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive
Read the Docs → · View CLI source on GitHub · Conceptio Open Knowledge Archive