ARBITRA

A document-level ATT&CK extraction framework for cyber threat intelligence. Multiple expert LLM roles propose candidate entities, and each candidate is verified through a Quantitative Bipolar Argumentation Framework (QBAF), combining document-level context utilization with high-precision extraction.