{"as_of":"2026-08-08T15:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fd41eaeba287ad09ebc27323afb70a7a8b6beeb13dd32a131221a6920e47f7e3","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T21:44:03.982650Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.09385/citation-record","integrity":"/paper/2502.09385/integrity","json":"/paper/2502.09385/citation-record.json","paper":"/paper/2502.09385"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.088919Z","title":"Strategically-motivated advanced persistent threat: Definition, process, tactics and a disinformation model of coun- terattack,","venue":null,"work_id":"18e94cb1-2b77-43da-9b3f-dbdab31c314e","year":2019},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.946162Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:ef340b0ce07b59cf78d8e20058e28ed9c319e31dd143554529ad6c6804a29d6b","observation_id":"2775465d-1985-4e8f-9bfa-a89d6290ec91","resolution":{"observed_at":"2026-08-07T21:44:04.091945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.080615Z","title":"A systematic literature review on advanced persistent threat behaviors and its detection strategy,","venue":null,"work_id":"6525b176-4117-4a26-90e1-99b5b73d1a8e","year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.949492Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:8d79bcf8d32793c77ebba25f265284b2d1f405cc7b7fed42bdec515d130e17bc","observation_id":"65873729-e507-4f93-8bec-5a3ebde0fd45","resolution":{"observed_at":"2026-08-07T21:44:04.083545Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:03.953133Z","title":"A survey on evaluation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.953133Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:9efa6874ddc3579a781f1f5b5b937dbfb6839f99f1bcdc9cf72f8fc66628fdfc","observation_id":"aa2e16b2-0c4e-4fbe-9a2d-d07db58ac8b9","resolution":{"observed_at":"2026-08-07T21:44:03.953133Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.00891","last_updated":"2024-01-30T16:55:25Z","snapshot_observed_at":"2026-07-06T17:23:55.166594Z","submitted_at":"2024-01-30T16:55:25Z","title":"Large Language Models in Cybersecurity: State-of-the-Art","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.00891","snapshot_observed_at":"2026-08-07T21:44:03.956555Z","title":"Large language models in cybersecurity: State-of-the-art,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.956555Z"},"links":{"cited_paper":"/paper/2402.00891","citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:1996d77df9edd11121cea80c34d6b2a36ffafcd2bac226a7bbd31f9390f4649b","observation_id":"345d1aec-2a6f-40e2-8300-4858a48b9913","resolution":{"observed_at":"2026-08-07T21:44:03.956555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.068440Z","title":"A scalable and efficient outlier detection strategy for categorical data,","venue":null,"work_id":"8d247ecb-8c2b-43fd-96b6-3e9f936acb08","year":2007},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.959660Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:c671b06d2bda3864db149b652baf6bfe3b2d7c8ee1fae518788fcd6c8501ce66","observation_id":"675ee37c-4e7c-4cc4-ba22-e11100616c44","resolution":{"observed_at":"2026-08-07T21:44:04.070578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.060910Z","title":"The odd one out: Identifying and char- acterising anomalies,","venue":null,"work_id":"361cd1f0-63cf-440e-aefd-6bc42ca34432","year":2011},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.962782Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:74c5f6ef2ed2ea56a9761ac08608d36efedc89a22ea171436c21ac5003d9b133","observation_id":"57e2fb60-1b44-4a22-bcd5-d13cfe67b89b","resolution":{"observed_at":"2026-08-07T21:44:04.063610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.054343Z","title":"Outlier detection for transaction databases using association rules,","venue":null,"work_id":"f14e90c2-d8c8-44e3-b15f-74920accead1","year":2008},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.966888Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:78cfaf6925427a8a47b95cf24b65fdcbb9b5e1ee999d5610b0f7d8ee884158a5","observation_id":"c33c07af-37b3-4a0f-acd0-27f989d3cc11","resolution":{"observed_at":"2026-08-07T21:44:04.057036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.047284Z","title":"A baseline for unsupervised advanced persistent threat detection in system-level provenance,","venue":null,"work_id":"8f8128ab-45f7-4675-a69f-2668a1869fc2","year":2020},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.969229Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:1599ccda15cb6e835f4a1023665b74f0232864c75e212fe75c6540a2f4e4dcc0","observation_id":"2de9c4e7-b15f-41ed-82c3-98c7c9148a2d","resolution":{"observed_at":"2026-08-07T21:44:04.049652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.037433Z","title":"A rule mining-based advanced persistent threats detection system,","venue":null,"work_id":"11ecbada-f2af-499a-b7fa-c2e13294c881","year":2021},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.971803Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:a8842fcc15bfa1e9ad4616b9c5c4886444bf85eb24b3710b94fa8704aee15701","observation_id":"6befc9b3-7b9e-4715-83fb-ef03d2be19dd","resolution":{"observed_at":"2026-08-07T21:44:04.040118Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.028853Z","title":"Hack me if you can: Aggregating autoencoders for countering persistent access threats within highly imbalanced data,","venue":null,"work_id":"821062c0-b996-4dc1-9301-88e3f066faaa","year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.974773Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:2b3040cb690ae0767eda99d91fa5c3d11ba2ecff710acf22f85eb80242e5fac6","observation_id":"20d2946e-9b08-40e9-9a1e-ab90f4e57bfd","resolution":{"observed_at":"2026-08-07T21:44:04.031930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.018705Z","title":"A survey of large language models for cyber threat detection,","venue":null,"work_id":"61838bd4-9090-4183-9e82-9371da2f30e6","year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.978728Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:7713a90656548a154a3317ed09c9600cda944d96f4c2df4b2d36feaa8b117a7a","observation_id":"30b4e05e-6547-4488-905c-a72349ac2581","resolution":{"observed_at":"2026-08-07T21:44:04.022110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T21:44:04.007103Z","title":"Cysecbert: A domain-adapted language model for the cybersecurity domain,","venue":null,"work_id":"5219592b-e121-4ef2-9971-5cc47c489759","year":2024},"citing_paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T21:44:03.982650Z"},"links":{"citing_paper":"/paper/2502.09385"},"observation_digest":"sha256:a094b5a74d1074c90205aa4c506cf11285e389f3e2dd1e707e73d54686558ad7","observation_id":"d1ab48f8-65a2-4175-9fec-8f21b8b85e47","resolution":{"observed_at":"2026-08-07T21:44:04.011803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.09385","last_updated":"2025-02-13T15:01:18Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T21:38:41.597713Z","submitted_at":"2025-02-13T15:01:18Z","title":"APT-LLM: Embedding-Based Anomaly Detection of Cyber Advanced Persistent Threats Using Large Language Models"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":2,"verified_exact":0,"verified_fuzzy":10},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 0 inbound Pith citation observations for arXiv:2502.09385."}