{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KMQKAFYMCDAP32AMAKGCNKFHEY","short_pith_number":"pith:KMQKAFYM","canonical_record":{"source":{"id":"2407.13093","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T01:42:42Z","cross_cats_sorted":[],"title_canon_sha256":"b7aa7e3eeb678c46af25b8efaec5a118d1f47a0175c223af6cac9710e994d83a","abstract_canon_sha256":"f3022075227984d92e98f739a4b483621225c59f9236a0d704883a729e374602"},"schema_version":"1.0"},"canonical_sha256":"5320a0170c10c0fde80c028c26a8a72602df9b1aff2dffe692483830e1fb4264","source":{"kind":"arxiv","id":"2407.13093","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13093","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13093v1","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13093","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_12","alias_value":"KMQKAFYMCDAP","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_16","alias_value":"KMQKAFYMCDAP32AM","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_8","alias_value":"KMQKAFYM","created_at":"2026-07-05T08:45:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KMQKAFYMCDAP32AMAKGCNKFHEY","target":"record","payload":{"canonical_record":{"source":{"id":"2407.13093","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T01:42:42Z","cross_cats_sorted":[],"title_canon_sha256":"b7aa7e3eeb678c46af25b8efaec5a118d1f47a0175c223af6cac9710e994d83a","abstract_canon_sha256":"f3022075227984d92e98f739a4b483621225c59f9236a0d704883a729e374602"},"schema_version":"1.0"},"canonical_sha256":"5320a0170c10c0fde80c028c26a8a72602df9b1aff2dffe692483830e1fb4264","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:45:33.379650Z","signature_b64":"f1QuMKWaOIuIF5w9pucvMY3pFX1Mqmgp1cMBvnPKTtEXbZJUWgnzWV9FlokecOMHYKbRbsNWQqqYyMdhKBf1Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5320a0170c10c0fde80c028c26a8a72602df9b1aff2dffe692483830e1fb4264","last_reissued_at":"2026-07-05T08:45:33.379153Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:45:33.379153Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.13093","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DAcej4S/kQG7c2Hez/wtNBo4e4pjtBnwtspw16QYY3E2t4Yv0pJKSLJe2YzZZV1RSacYW2DHpDAaht9Nf067BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:25:40.301027Z"},"content_sha256":"5389a7d239265a349a69ade4d26be32a5dc85bb12891f9ac837ad1e39e40db6e","schema_version":"1.0","event_id":"sha256:5389a7d239265a349a69ade4d26be32a5dc85bb12891f9ac837ad1e39e40db6e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KMQKAFYMCDAP32AMAKGCNKFHEY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Using LLMs to Automate Threat Intelligence Analysis Workflows in Security Operation Centers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"PeiYu Tseng, Peng Liu, Xushu Dai, ZihDwo Yeh","submitted_at":"2024-07-18T01:42:42Z","abstract_excerpt":"SIEM systems are prevalent and play a critical role in a variety of analyst workflows in Security Operation Centers. However, modern SIEMs face a big challenge: they still cannot relieve analysts from the repetitive tasks involved in analyzing CTI (Cyber Threat Intelligence) reports written in natural languages. This project aims to develop an AI agent to replace the labor intensive repetitive tasks involved in analyzing CTI reports. The agent exploits the revolutionary capabilities of LLMs (e.g., GPT-4), but it does not require any human intervention."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13093","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.13093/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:45:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iFfgm18+hMmihI5+3qZF68Jnp4wY/5HTZeXc89+3Ll1hy57eiWFILBErJ+UG+HGGxaBkmOB4/x4QU+XOD/NrCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:25:40.301517Z"},"content_sha256":"6b77ded22f21a779f73bcb142a3f1a8bcc6e37f346793594b7b1db6d3a3c05e7","schema_version":"1.0","event_id":"sha256:6b77ded22f21a779f73bcb142a3f1a8bcc6e37f346793594b7b1db6d3a3c05e7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/bundle.json","state_url":"https://pith.science/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:25:40Z","links":{"resolver":"https://pith.science/pith/KMQKAFYMCDAP32AMAKGCNKFHEY","bundle":"https://pith.science/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/bundle.json","state":"https://pith.science/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KMQKAFYMCDAP32AMAKGCNKFHEY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KMQKAFYMCDAP32AMAKGCNKFHEY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f3022075227984d92e98f739a4b483621225c59f9236a0d704883a729e374602","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T01:42:42Z","title_canon_sha256":"b7aa7e3eeb678c46af25b8efaec5a118d1f47a0175c223af6cac9710e994d83a"},"schema_version":"1.0","source":{"id":"2407.13093","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13093","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13093v1","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13093","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_12","alias_value":"KMQKAFYMCDAP","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_16","alias_value":"KMQKAFYMCDAP32AM","created_at":"2026-07-05T08:45:33Z"},{"alias_kind":"pith_short_8","alias_value":"KMQKAFYM","created_at":"2026-07-05T08:45:33Z"}],"graph_snapshots":[{"event_id":"sha256:6b77ded22f21a779f73bcb142a3f1a8bcc6e37f346793594b7b1db6d3a3c05e7","target":"graph","created_at":"2026-07-05T08:45:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.13093/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"SIEM systems are prevalent and play a critical role in a variety of analyst workflows in Security Operation Centers. However, modern SIEMs face a big challenge: they still cannot relieve analysts from the repetitive tasks involved in analyzing CTI (Cyber Threat Intelligence) reports written in natural languages. This project aims to develop an AI agent to replace the labor intensive repetitive tasks involved in analyzing CTI reports. The agent exploits the revolutionary capabilities of LLMs (e.g., GPT-4), but it does not require any human intervention.","authors_text":"PeiYu Tseng, Peng Liu, Xushu Dai, ZihDwo Yeh","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T01:42:42Z","title":"Using LLMs to Automate Threat Intelligence Analysis Workflows in Security Operation Centers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13093","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5389a7d239265a349a69ade4d26be32a5dc85bb12891f9ac837ad1e39e40db6e","target":"record","created_at":"2026-07-05T08:45:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f3022075227984d92e98f739a4b483621225c59f9236a0d704883a729e374602","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T01:42:42Z","title_canon_sha256":"b7aa7e3eeb678c46af25b8efaec5a118d1f47a0175c223af6cac9710e994d83a"},"schema_version":"1.0","source":{"id":"2407.13093","kind":"arxiv","version":1}},"canonical_sha256":"5320a0170c10c0fde80c028c26a8a72602df9b1aff2dffe692483830e1fb4264","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5320a0170c10c0fde80c028c26a8a72602df9b1aff2dffe692483830e1fb4264","first_computed_at":"2026-07-05T08:45:33.379153Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:45:33.379153Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f1QuMKWaOIuIF5w9pucvMY3pFX1Mqmgp1cMBvnPKTtEXbZJUWgnzWV9FlokecOMHYKbRbsNWQqqYyMdhKBf1Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:45:33.379650Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.13093","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5389a7d239265a349a69ade4d26be32a5dc85bb12891f9ac837ad1e39e40db6e","sha256:6b77ded22f21a779f73bcb142a3f1a8bcc6e37f346793594b7b1db6d3a3c05e7"],"state_sha256":"a5c75e64d1c64cbb2ec7f2aff15ae98d50ec74ca4b096ce5c846652acc7a8518"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q4pN8bciy7KODhFdhwtOwPYPBb0kOBURX5pqCLpPga8d7/ECwzRoW7z3OC9jihtLwhWj9/3Z8OGwfLs3gIyYBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:25:40.305126Z","bundle_sha256":"8c0cab2cd24febf1153cc5af87bde70d88a7ba8db4fcf209aa4a1ede70f5e417"}}