{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2018:7VI7AWGTTDUOHO2CUUZHMFYPR5","short_pith_number":"pith:7VI7AWGT","schema_version":"1.0","canonical_sha256":"fd51f058d398e8e3bb42a53276170f8f66acf3599bbc4f8c786b3af45f96bb67","source":{"kind":"arxiv","id":"1804.04177","version":2},"attestation_state":"computed","paper":{"title":"Detecting Malicious PowerShell Commands using Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NE"],"primary_cat":"cs.CR","authors_text":"Amir Rubin, Danny Hendler, Shay Kels","submitted_at":"2018-04-11T19:16:03Z","abstract_excerpt":"Microsoft's PowerShell is a command-line shell and scripting language that is installed by default on Windows machines. While PowerShell can be configured by administrators for restricting access and reducing vulnerabilities, these restrictions can be bypassed. Moreover, PowerShell commands can be easily generated dynamically, executed from memory, encoded and obfuscated, thus making the logging and forensic analysis of code executed by PowerShell challenging.For all these reasons, PowerShell is increasingly used by cybercriminals as part of their attacks' tool chain, mainly for downloading ma"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1804.04177","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T19:16:03Z","cross_cats_sorted":["cs.NE"],"title_canon_sha256":"44c7263dd9e3df319542630aa0fbd9bb3400c3f18f72ea11ec5dc9abe5b5c732","abstract_canon_sha256":"f157c6f36bb93a2e3acae278100fad09d7f6c770113a6117df2877ff7f963d96"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:18:30.692263Z","signature_b64":"+2pwjDJ6IRmkof++gEDW4WigVRXqBW4Dk5VaI7jmZEVFY0sc7oCQiYqcRJFNbfmZ8emkHrjMoYDqWcT1fuo2CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fd51f058d398e8e3bb42a53276170f8f66acf3599bbc4f8c786b3af45f96bb67","last_reissued_at":"2026-05-18T00:18:30.691839Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:18:30.691839Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Detecting Malicious PowerShell Commands using Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NE"],"primary_cat":"cs.CR","authors_text":"Amir Rubin, Danny Hendler, Shay Kels","submitted_at":"2018-04-11T19:16:03Z","abstract_excerpt":"Microsoft's PowerShell is a command-line shell and scripting language that is installed by default on Windows machines. While PowerShell can be configured by administrators for restricting access and reducing vulnerabilities, these restrictions can be bypassed. Moreover, PowerShell commands can be easily generated dynamically, executed from memory, encoded and obfuscated, thus making the logging and forensic analysis of code executed by PowerShell challenging.For all these reasons, PowerShell is increasingly used by cybercriminals as part of their attacks' tool chain, mainly for downloading ma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.04177","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1804.04177","created_at":"2026-05-18T00:18:30.691906+00:00"},{"alias_kind":"arxiv_version","alias_value":"1804.04177v2","created_at":"2026-05-18T00:18:30.691906+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.04177","created_at":"2026-05-18T00:18:30.691906+00:00"},{"alias_kind":"pith_short_12","alias_value":"7VI7AWGTTDUO","created_at":"2026-05-18T12:32:11.075285+00:00"},{"alias_kind":"pith_short_16","alias_value":"7VI7AWGTTDUOHO2C","created_at":"2026-05-18T12:32:11.075285+00:00"},{"alias_kind":"pith_short_8","alias_value":"7VI7AWGT","created_at":"2026-05-18T12:32:11.075285+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5","json":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5.json","graph_json":"https://pith.science/api/pith-number/7VI7AWGTTDUOHO2CUUZHMFYPR5/graph.json","events_json":"https://pith.science/api/pith-number/7VI7AWGTTDUOHO2CUUZHMFYPR5/events.json","paper":"https://pith.science/paper/7VI7AWGT"},"agent_actions":{"view_html":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5","download_json":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5.json","view_paper":"https://pith.science/paper/7VI7AWGT","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1804.04177&json=true","fetch_graph":"https://pith.science/api/pith-number/7VI7AWGTTDUOHO2CUUZHMFYPR5/graph.json","fetch_events":"https://pith.science/api/pith-number/7VI7AWGTTDUOHO2CUUZHMFYPR5/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5/action/timestamp_anchor","attest_storage":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5/action/storage_attestation","attest_author":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5/action/author_attestation","sign_citation":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5/action/citation_signature","submit_replication":"https://pith.science/pith/7VI7AWGTTDUOHO2CUUZHMFYPR5/action/replication_record"}},"created_at":"2026-05-18T00:18:30.691906+00:00","updated_at":"2026-05-18T00:18:30.691906+00:00"}