Adversary Brains: Hypothesis-Based Logical Signatures for Threat Actor Detection with LLMs

An adversary brain is an LLM-based model of a threat actor's behavior, held as an evolving logical signature: a hypothesis with enough structure that data can test it continuously, without a person re-interpreting it each time. Rather than any single observation, such as an IoC Indicator of...