{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:BCHM47OC62HUN3B5HNMGLMG63S","short_pith_number":"pith:BCHM47OC","canonical_record":{"source":{"id":"1804.08653","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-23T18:23:40Z","cross_cats_sorted":[],"title_canon_sha256":"c26cbeb331bda4c73b39426b50a166c9ba057cc50712681a4c1a12510749c320","abstract_canon_sha256":"733eb033bb715691fbf259eda6d02a1050e8eb21d1ebed9954760b1cac9ed0b2"},"schema_version":"1.0"},"canonical_sha256":"088ece7dc2f68f46ec3d3b5865b0dedc8fba32f9f53339f6e272d515bdcdb27f","source":{"kind":"arxiv","id":"1804.08653","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.08653","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"arxiv_version","alias_value":"1804.08653v1","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.08653","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"pith_short_12","alias_value":"BCHM47OC62HU","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_16","alias_value":"BCHM47OC62HUN3B5","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_8","alias_value":"BCHM47OC","created_at":"2026-05-18T12:32:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:BCHM47OC62HUN3B5HNMGLMG63S","target":"record","payload":{"canonical_record":{"source":{"id":"1804.08653","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-23T18:23:40Z","cross_cats_sorted":[],"title_canon_sha256":"c26cbeb331bda4c73b39426b50a166c9ba057cc50712681a4c1a12510749c320","abstract_canon_sha256":"733eb033bb715691fbf259eda6d02a1050e8eb21d1ebed9954760b1cac9ed0b2"},"schema_version":"1.0"},"canonical_sha256":"088ece7dc2f68f46ec3d3b5865b0dedc8fba32f9f53339f6e272d515bdcdb27f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:17:47.127828Z","signature_b64":"HdK9KuLt0i1GBxd4wiHmV4es3wOKpwOwY1ivLsGyZfzhQLVyN0qKSIaHLG0Ims56+PVMacOqqAjp29oiNK4VAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"088ece7dc2f68f46ec3d3b5865b0dedc8fba32f9f53339f6e272d515bdcdb27f","last_reissued_at":"2026-05-18T00:17:47.127077Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:17:47.127077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1804.08653","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:17:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uDiVxZbkBTyagwUxOWkj/XXw2e9icJ8okZ7+48xJTaz5YLoguh7N6r+0srHIf/piOFzchEPdGZNX60gHEjzpCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-20T01:41:15.238874Z"},"content_sha256":"3a47e66c9b89a0539a0a7a86a6d7931f20db40ea4cb55c22879422debaaa7702","schema_version":"1.0","event_id":"sha256:3a47e66c9b89a0539a0a7a86a6d7931f20db40ea4cb55c22879422debaaa7702"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:BCHM47OC62HUN3B5HNMGLMG63S","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Forensic Analysis of the exFAT artefacts","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Joe Carthy, Nhien-An Le-Khac, Tahar Kechadi, Yves Vandermeer","submitted_at":"2018-04-23T18:23:40Z","abstract_excerpt":"Although keeping some basic concepts inherited from FAT32, the exFAT file system introduces many differences, such as the new mapping scheme of directory entries. The combination of exFAT mapping scheme with the allocation of bitmap files and the use of FAT leads to new forensic possibilities. The recovery of deleted files, including fragmented ones and carving becomes more accurate compared with former forensic processes. Nowadays, the accurate and sound forensic analysis is more than ever needed, as there is a high risk of erroneous interpretation. Indeed, most of the related work in the lit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.08653","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:17:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uU16UyCTuH/oATrfeNtRBesYilSm19qiuleJaFzY+GUU4Vfmhj3Kmoo828aayvt6HcMXmwGzxWFqvsMlJnrGCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-20T01:41:15.239231Z"},"content_sha256":"2f386c163ced13e21bfa40b43bc3f6c90899452e9a6f18bba481754653c55c96","schema_version":"1.0","event_id":"sha256:2f386c163ced13e21bfa40b43bc3f6c90899452e9a6f18bba481754653c55c96"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BCHM47OC62HUN3B5HNMGLMG63S/bundle.json","state_url":"https://pith.science/pith/BCHM47OC62HUN3B5HNMGLMG63S/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BCHM47OC62HUN3B5HNMGLMG63S/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-20T01:41:15Z","links":{"resolver":"https://pith.science/pith/BCHM47OC62HUN3B5HNMGLMG63S","bundle":"https://pith.science/pith/BCHM47OC62HUN3B5HNMGLMG63S/bundle.json","state":"https://pith.science/pith/BCHM47OC62HUN3B5HNMGLMG63S/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BCHM47OC62HUN3B5HNMGLMG63S/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:BCHM47OC62HUN3B5HNMGLMG63S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"733eb033bb715691fbf259eda6d02a1050e8eb21d1ebed9954760b1cac9ed0b2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-23T18:23:40Z","title_canon_sha256":"c26cbeb331bda4c73b39426b50a166c9ba057cc50712681a4c1a12510749c320"},"schema_version":"1.0","source":{"id":"1804.08653","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.08653","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"arxiv_version","alias_value":"1804.08653v1","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.08653","created_at":"2026-05-18T00:17:47Z"},{"alias_kind":"pith_short_12","alias_value":"BCHM47OC62HU","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_16","alias_value":"BCHM47OC62HUN3B5","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_8","alias_value":"BCHM47OC","created_at":"2026-05-18T12:32:13Z"}],"graph_snapshots":[{"event_id":"sha256:2f386c163ced13e21bfa40b43bc3f6c90899452e9a6f18bba481754653c55c96","target":"graph","created_at":"2026-05-18T00:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Although keeping some basic concepts inherited from FAT32, the exFAT file system introduces many differences, such as the new mapping scheme of directory entries. The combination of exFAT mapping scheme with the allocation of bitmap files and the use of FAT leads to new forensic possibilities. The recovery of deleted files, including fragmented ones and carving becomes more accurate compared with former forensic processes. Nowadays, the accurate and sound forensic analysis is more than ever needed, as there is a high risk of erroneous interpretation. Indeed, most of the related work in the lit","authors_text":"Joe Carthy, Nhien-An Le-Khac, Tahar Kechadi, Yves Vandermeer","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-23T18:23:40Z","title":"Forensic Analysis of the exFAT artefacts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.08653","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3a47e66c9b89a0539a0a7a86a6d7931f20db40ea4cb55c22879422debaaa7702","target":"record","created_at":"2026-05-18T00:17:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"733eb033bb715691fbf259eda6d02a1050e8eb21d1ebed9954760b1cac9ed0b2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-23T18:23:40Z","title_canon_sha256":"c26cbeb331bda4c73b39426b50a166c9ba057cc50712681a4c1a12510749c320"},"schema_version":"1.0","source":{"id":"1804.08653","kind":"arxiv","version":1}},"canonical_sha256":"088ece7dc2f68f46ec3d3b5865b0dedc8fba32f9f53339f6e272d515bdcdb27f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"088ece7dc2f68f46ec3d3b5865b0dedc8fba32f9f53339f6e272d515bdcdb27f","first_computed_at":"2026-05-18T00:17:47.127077Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:17:47.127077Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HdK9KuLt0i1GBxd4wiHmV4es3wOKpwOwY1ivLsGyZfzhQLVyN0qKSIaHLG0Ims56+PVMacOqqAjp29oiNK4VAw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:17:47.127828Z","signed_message":"canonical_sha256_bytes"},"source_id":"1804.08653","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3a47e66c9b89a0539a0a7a86a6d7931f20db40ea4cb55c22879422debaaa7702","sha256:2f386c163ced13e21bfa40b43bc3f6c90899452e9a6f18bba481754653c55c96"],"state_sha256":"769cf59b25d7c82f109ef23969cd1c904929f851f48122e83678c671717cf584"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Lh+6/7x0liVoIieosSc+ybshbzbxN8njH+rPL3wqcS2jPs1J1HEcNBLdv90NEU9qHeOjtzXcv7fsZas9tf2HAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-20T01:41:15.241205Z","bundle_sha256":"f152850fd5a083698648b3fcae70695145651f24200b3091e964170c48ed04f7"}}