GC-FIW NetFlow Research Data and Code

Code, configurations, frozen aggregate metric summaries, and figure-reconstruction inputs supporting the manuscript 'Auditable Feature-Importance Allocation for Low-False-Positive NetFlow Anomaly Detection'. The package covers four public NetFlow v2 domains and includes five-seed exploratory summaries plus a prespecified confirmation on two domains. Raw traffic records, processed arrays, model checkpoints, and per-record anomaly scores are not redistributed. The original datasets remain available from their cited public DOI records. The deposit supports audit of reported aggregate values, implementation, configuration, and figure reconstruction; it is not an end-to-end binary replay of every training run.