NodLink

NodLink is a public system log dataset used to evaluate large language models' capabilities in supporting host-based intrusion detection systems (HIDS) by assessing their performance on complex and noisy system logs.

Papers using NodLink (2)

HIDBench: Benchmarking Large Language Models for Host-Based Intrusion Detection2026OCR-APT: Reconstructing APT Stories from Audit Logs using Subgraph Anomaly Detection and LLMs2025