{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KDVGRKDTHYHWNLOZ4Q4ASUC2DW","short_pith_number":"pith:KDVGRKDT","canonical_record":{"source":{"id":"2502.00677","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-02T05:28:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6d051ffd5c55428a647b9cf45e8bfc9bbf1794796f9a55cb902a5307fd426203","abstract_canon_sha256":"04e1ee29af5b572d5f35a05c5f80f502b01bcb61a39c740b0250e942100f82bc"},"schema_version":"1.0"},"canonical_sha256":"50ea68a8733e0f66add9e43809505a1db470a9cf3cfc3528fd689501890a017c","source":{"kind":"arxiv","id":"2502.00677","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00677","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00677v1","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00677","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_12","alias_value":"KDVGRKDTHYHW","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_16","alias_value":"KDVGRKDTHYHWNLOZ","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_8","alias_value":"KDVGRKDT","created_at":"2026-07-05T10:08:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KDVGRKDTHYHWNLOZ4Q4ASUC2DW","target":"record","payload":{"canonical_record":{"source":{"id":"2502.00677","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-02T05:28:17Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6d051ffd5c55428a647b9cf45e8bfc9bbf1794796f9a55cb902a5307fd426203","abstract_canon_sha256":"04e1ee29af5b572d5f35a05c5f80f502b01bcb61a39c740b0250e942100f82bc"},"schema_version":"1.0"},"canonical_sha256":"50ea68a8733e0f66add9e43809505a1db470a9cf3cfc3528fd689501890a017c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:08:37.019754Z","signature_b64":"+fTJtpTNo+VnVDd9CvlcklhyDCEyVslFmyFaUkxKikF0Kh9XxT8zkrPbbER3L5fx55WP/4tevWTYGhzZiGN8Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"50ea68a8733e0f66add9e43809505a1db470a9cf3cfc3528fd689501890a017c","last_reissued_at":"2026-07-05T10:08:37.019325Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:08:37.019325Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.00677","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tAbxkk2wNaJb9iMTBOFaRE1nmLI/4xggsqhgggemYo9eee9f7idHE0IJk3aV91lu7RvF+oITXQA68diFHC3pAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:13:00.754842Z"},"content_sha256":"1d4bd3507642422d52efbaa95256ccaeac99f42122480d7aa74ba4584cd55683","schema_version":"1.0","event_id":"sha256:1d4bd3507642422d52efbaa95256ccaeac99f42122480d7aa74ba4584cd55683"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KDVGRKDTHYHWNLOZ4Q4ASUC2DW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM-based event log analysis techniques: A survey","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.AI","authors_text":"Saad Khan, Simon Parkinson, Siraaj Akhtar","submitted_at":"2025-02-02T05:28:17Z","abstract_excerpt":"Event log analysis is an important task that security professionals undertake. Event logs record key information on activities that occur on computing devices, and due to the substantial number of events generated, they consume a large amount of time and resources to analyse. This demanding and repetitive task is also prone to errors. To address these concerns, researchers have developed automated techniques to improve the event log analysis process. Large Language Models (LLMs) have recently demonstrated the ability to successfully perform a wide range of tasks that individuals would usually "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00677","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.00677/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bhn/lOo5uFgG6+kzjTwWFG/oXVw/VnypKPCSLCfpSNuD/HM21eVfBtzBQ55VJkpiPbRFoaytxrMTyRdDWbRaAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:13:00.755842Z"},"content_sha256":"c31676f9931790c4a3d9bb74341aff18d934d094a33dc5f7a1b00f9cfc610667","schema_version":"1.0","event_id":"sha256:c31676f9931790c4a3d9bb74341aff18d934d094a33dc5f7a1b00f9cfc610667"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/bundle.json","state_url":"https://pith.science/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T20:13:00Z","links":{"resolver":"https://pith.science/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW","bundle":"https://pith.science/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/bundle.json","state":"https://pith.science/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KDVGRKDTHYHWNLOZ4Q4ASUC2DW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KDVGRKDTHYHWNLOZ4Q4ASUC2DW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"04e1ee29af5b572d5f35a05c5f80f502b01bcb61a39c740b0250e942100f82bc","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-02T05:28:17Z","title_canon_sha256":"6d051ffd5c55428a647b9cf45e8bfc9bbf1794796f9a55cb902a5307fd426203"},"schema_version":"1.0","source":{"id":"2502.00677","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00677","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00677v1","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00677","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_12","alias_value":"KDVGRKDTHYHW","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_16","alias_value":"KDVGRKDTHYHWNLOZ","created_at":"2026-07-05T10:08:37Z"},{"alias_kind":"pith_short_8","alias_value":"KDVGRKDT","created_at":"2026-07-05T10:08:37Z"}],"graph_snapshots":[{"event_id":"sha256:c31676f9931790c4a3d9bb74341aff18d934d094a33dc5f7a1b00f9cfc610667","target":"graph","created_at":"2026-07-05T10:08:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.00677/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Event log analysis is an important task that security professionals undertake. Event logs record key information on activities that occur on computing devices, and due to the substantial number of events generated, they consume a large amount of time and resources to analyse. This demanding and repetitive task is also prone to errors. To address these concerns, researchers have developed automated techniques to improve the event log analysis process. Large Language Models (LLMs) have recently demonstrated the ability to successfully perform a wide range of tasks that individuals would usually ","authors_text":"Saad Khan, Simon Parkinson, Siraaj Akhtar","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-02T05:28:17Z","title":"LLM-based event log analysis techniques: A survey"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00677","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1d4bd3507642422d52efbaa95256ccaeac99f42122480d7aa74ba4584cd55683","target":"record","created_at":"2026-07-05T10:08:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"04e1ee29af5b572d5f35a05c5f80f502b01bcb61a39c740b0250e942100f82bc","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.AI","submitted_at":"2025-02-02T05:28:17Z","title_canon_sha256":"6d051ffd5c55428a647b9cf45e8bfc9bbf1794796f9a55cb902a5307fd426203"},"schema_version":"1.0","source":{"id":"2502.00677","kind":"arxiv","version":1}},"canonical_sha256":"50ea68a8733e0f66add9e43809505a1db470a9cf3cfc3528fd689501890a017c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"50ea68a8733e0f66add9e43809505a1db470a9cf3cfc3528fd689501890a017c","first_computed_at":"2026-07-05T10:08:37.019325Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:08:37.019325Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+fTJtpTNo+VnVDd9CvlcklhyDCEyVslFmyFaUkxKikF0Kh9XxT8zkrPbbER3L5fx55WP/4tevWTYGhzZiGN8Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:08:37.019754Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.00677","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1d4bd3507642422d52efbaa95256ccaeac99f42122480d7aa74ba4584cd55683","sha256:c31676f9931790c4a3d9bb74341aff18d934d094a33dc5f7a1b00f9cfc610667"],"state_sha256":"b3ca9350024a2881d1bd129c1795d9898a58a6a3759b1ae77c982a821b3ba98c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TJXELNOn6Ne5v/bzR/ShhI6+pQFZ7ysis0+6lQwQunJjGNMyT6R4kMMyRUTAMa1yXdTvN/23KVBXZJUku5ztBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T20:13:00.778232Z","bundle_sha256":"6364b3e799402a7b6f0035802db89973a7023f8df52238d5aa2cdbbc59f20fab"}}