From Anomaly to Attack Path: LLM-Based Network Traffic Investigation for APT Detection. - Benedikt Pletzer; Jürgen Mottok (EuroSec, 2026)