REFINE: A Resilient Evolution Framework for Intelligent Enterprise Alert Triage in Security Operations Centers.

arXiv:2609.32516v1 Announce Type: cross Abstract: Security Operations Centers (SOCs) process large volumes of alerts daily. Alert triage prioritizes high-risk threats while reducing manual review of benign alerts. LLM agents can reason over logs and threat int