{"as_of":"2026-08-08T09:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:7da0a9850eabd58f85acaab756bc82be9009da2c6da7b11f711bdbebcbd0c97a","coverage":[{"denominator":74,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":74,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:04:45.772349Z","state":"measured"},{"denominator":74,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":74,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.08922/citation-record","integrity":"/paper/2506.08922/integrity","json":"/paper/2506.08922/citation-record.json","paper":"/paper/2506.08922"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.494885Z","title":"In: ACM SIGCOMM IMC (2006)","venue":null,"work_id":"f02de7b6-2529-4ef5-a340-2eb05fcfd694","year":2006},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.551245Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:06342cab41c96a67d644e33ef49900730baf5faef939fc209b713a56414d72ea","observation_id":"ae77283c-eabe-4fec-9a90-16ccdb365136","resolution":{"observed_at":"2026-08-07T05:04:46.498381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.481692Z","title":null,"venue":null,"work_id":"7be69245-a10e-4ad1-a0e2-23b79b69b987","year":2019},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.554879Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:67e7b940f90f71b90afaac3806dc1d0c5a0c58185ff040e6dcfc17fd80dcf853","observation_id":"4ae94ff6-e4b0-47bc-a846-463be9d4cee1","resolution":{"observed_at":"2026-08-07T05:04:46.485528Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.471376Z","title":null,"venue":null,"work_id":"6f3e392a-0d7a-490e-9f04-d70258e7ed2f","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.558616Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:3108517598fc6cd3ea6bca891425d00e98eac0281ccfd327711e4916f4fd86fa","observation_id":"a9406e4f-8156-4a88-a659-5edc5e81d883","resolution":{"observed_at":"2026-08-07T05:04:46.474570Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.461088Z","title":"In: AISec (2016)","venue":null,"work_id":"0409bc40-b1d4-4c6e-8970-d1e976991968","year":2016},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.561858Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:da2ff6f7df7ab6735dc6c865280eb0f130755a3155adf2a4e9f9d42e6ab35845","observation_id":"dc953c75-77e7-4343-a4e2-299e036d6f08","resolution":{"observed_at":"2026-08-07T05:04:46.464617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.450993Z","title":null,"venue":null,"work_id":"b5aa8d68-cd18-4079-b8dd-a3c5e33680a2","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.565092Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:aa40e4a36cd103337de381dcd5e7e527e7432354a8e7032c461c210ede0e5fbe","observation_id":"ac4306ff-5eb7-4be6-ae59-39967c605d31","resolution":{"observed_at":"2026-08-07T05:04:46.454565Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.439413Z","title":"CISRC ’16 (2016)","venue":null,"work_id":"26e526df-ae80-49e7-8c9e-85db11f845c2","year":2016},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.568358Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c316e3eac5e1aad864637637b322da63e6601e9b12e9210a6580842ab6eeb5be","observation_id":"d8a26e6d-35b2-4cd4-b059-306dbf6acb35","resolution":{"observed_at":"2026-08-07T05:04:46.443052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.429945Z","title":null,"venue":null,"work_id":"bb8d8c4b-2c6c-407e-95a2-f3364abac06a","year":2015},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.571824Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:5098d48d45fc9dc0af5806cc3c713285ed82230b98a4956e1890f3df524e031c","observation_id":"fb86355d-a7ff-4c57-a72f-c9bddbd2ec20","resolution":{"observed_at":"2026-08-07T05:04:46.433123Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.420584Z","title":null,"venue":null,"work_id":"dbb0f291-8879-4d01-b018-130f6ee6ef66","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.574893Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:b69ed969a72caede2117772e094cc73e94755cffa014d59802f62a3a17990196","observation_id":"ffe9b47c-6345-4e35-a610-5d2043f9d89f","resolution":{"observed_at":"2026-08-07T05:04:46.424143Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.411618Z","title":null,"venue":null,"work_id":"6881a0bb-38f8-444a-a1c6-2704f7275d94","year":2021},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.577746Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:f354329151e5bfeda907381b9de570c9cd3aaba15a7a97930d6b327d127db4df","observation_id":"8dc33255-55e1-47ee-a33b-fd4eb61f564f","resolution":{"observed_at":"2026-08-07T05:04:46.414700Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.401843Z","title":null,"venue":null,"work_id":"c6b1c65e-d25e-4b59-8ba4-770b5f4671fd","year":2007},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.580624Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:8e352c46e9b1ea77b01025ee5657c1565604ef7d1198818c00902df08cc809e5","observation_id":"66189bad-532b-4285-b78c-14288e359f79","resolution":{"observed_at":"2026-08-07T05:04:46.405121Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.392344Z","title":null,"venue":null,"work_id":"f3ff4e2d-19e8-43af-ab46-73ba2d9d67f0","year":2011},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.583681Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:28caf72d802b9867a97c64c120009747c92df45d57566d31c62d40006980ff45","observation_id":"eec08be1-38cc-4c08-8aae-5a584e79a667","resolution":{"observed_at":"2026-08-07T05:04:46.395280Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.383230Z","title":null,"venue":null,"work_id":"c1188beb-4475-407b-b3c4-7b1909f93560","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.586592Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:df729458180383c6bf3d9d0c8407816a04669837648ba2ac84af19863b70b89e","observation_id":"99b8c194-536a-471f-90e0-9cc8ccb8649b","resolution":{"observed_at":"2026-08-07T05:04:46.386118Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.374307Z","title":null,"venue":null,"work_id":"477b3219-2577-41ce-8937-21aab11b09c7","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.590019Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:a959cb672afb6506465816f74e8c35e172729347b5c9ef20d5cd2837897a5bdd","observation_id":"ae9ea24c-b2f1-4b15-9553-883504a15cf0","resolution":{"observed_at":"2026-08-07T05:04:46.377272Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.365075Z","title":null,"venue":null,"work_id":"38630d79-daa6-4a7a-a87a-760ff09d30d5","year":2014},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.593367Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:902a9c21ef5a36d0e167e2cb313f92e751a546fbe0e8b777c91b75e01112604c","observation_id":"34158409-500b-4e29-a5a1-a171b40add9b","resolution":{"observed_at":"2026-08-07T05:04:46.368055Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.356242Z","title":null,"venue":null,"work_id":"8630f2ba-a681-4d3f-87aa-ce45da5c9ac0","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.596360Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c38366f35d027b9b944f752dbfb79680507dae666b31837fee2b58765bda82dc","observation_id":"865c9445-79cf-4dc5-912d-b6277ec4794f","resolution":{"observed_at":"2026-08-07T05:04:46.359296Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.347587Z","title":null,"venue":null,"work_id":"ac9e0608-d6c1-4aac-b359-0eb2c038a2ef","year":2018},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.599330Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:9c5c97a7e835e52dce2fbaceb9dd1c4e308bac5660377990bddb26a194589e0a","observation_id":"23f49813-90c2-4002-bdc1-2e2fc93034cc","resolution":{"observed_at":"2026-08-07T05:04:46.350678Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.338885Z","title":null,"venue":null,"work_id":"f7efcf20-cb65-41a5-ad31-e3dfef75c481","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.602169Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:31162f42676459d3c36d1ba7ae21a7a8204f62294ce6486e7321fa4adeab6796","observation_id":"ac7a4b5a-6993-4ca4-8939-0f533bcb53f9","resolution":{"observed_at":"2026-08-07T05:04:46.341767Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.330348Z","title":"In: EC2ND (2011)","venue":null,"work_id":"fb0207f7-1c4c-4013-aeb5-a6708d0d8403","year":2011},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.605122Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:42c89ead091bc40a0545e92b7906089def5675422097dff10dfcef3f98a16190","observation_id":"b5b4966a-88a8-46db-a25b-b740c3cfe0f9","resolution":{"observed_at":"2026-08-07T05:04:46.333211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.321396Z","title":"Rescorla, Mozilla: RFC on TLS 1.3.https://www.rfc-editor.org/rfc/rfc8446","venue":null,"work_id":"c231d406-6b35-48a4-8afc-7d43bf80414b","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.608146Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:a70f87790f363f0d296b45c651c88038fb017527d8b38d40187751becbba17b4","observation_id":"fe7e3e5a-0083-42b8-b823-21b81b50478a","resolution":{"observed_at":"2026-08-07T05:04:46.324326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.312477Z","title":null,"venue":null,"work_id":"896482fa-beeb-4e6b-b89e-8d95b759b4e7","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.610961Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:9b0a53267669139c82eaa875435226229dcd61104bac63fb45363ae51d43ebf7","observation_id":"3e49bb1d-f0fb-43e2-8365-9b4cd5fd4b44","resolution":{"observed_at":"2026-08-07T05:04:46.315410Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.303327Z","title":"IEEE Access pp","venue":null,"work_id":"74150485-2569-4729-8916-b1e337dfc576","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.613803Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:75217b9f30c36024e5745d05b57a459dda0252c79fbd751208c808b8418df98d","observation_id":"f44a73ad-af12-4135-9ada-5cbd1fbf067c","resolution":{"observed_at":"2026-08-07T05:04:46.306271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.293547Z","title":"In: USENIX Security (2017)","venue":null,"work_id":"1ffa4b82-374c-46ee-ae99-21368e44d92f","year":2017},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.616637Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:637b42b825e02363537be4a30871752e6499b6a998068685423f5c1677a7e0f8","observation_id":"ad46e2a1-b984-4fd2-a70a-40f66e5827a6","resolution":{"observed_at":"2026-08-07T05:04:46.296930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.284599Z","title":"In: ESORICS (2005)","venue":null,"work_id":"a3116957-9d61-4697-b670-ae15b7e8b615","year":2005},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.619732Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:ae644d9f01d56c10b812ddd7b28495b477bb2b18678711feab82de27792b9764","observation_id":"34198a46-7187-4de4-99c5-7c958c1d5c29","resolution":{"observed_at":"2026-08-07T05:04:46.287745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.274831Z","title":"Elsevier Advanced Technology Publications (2014)","venue":null,"work_id":"8e6dc5e6-6fab-4353-aa8a-ca9fa6842465","year":2014},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.622518Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:d86384fd6dfc3a02d14f6ce72ef705d0429b27108809a08f3601e68fa90ea620","observation_id":"0f5a7002-5f6c-454d-8884-9f4b161a6879","resolution":{"observed_at":"2026-08-07T05:04:46.278803Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.265833Z","title":null,"venue":null,"work_id":"5e4916fb-3f1f-4acc-b47e-a1929ebe0f3e","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.625589Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:058e87665a67358c7a4280ebefdffdc943687bdc7ce9a3cc529d69e9fecee204","observation_id":"f8009720-a8d3-49ed-a69c-c6d813c744ed","resolution":{"observed_at":"2026-08-07T05:04:46.268790Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.256264Z","title":null,"venue":null,"work_id":"85c0f7b2-c921-4d7a-b7f9-287d94f0a488","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.629039Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:5487091bc3df60e80eb834f6d72f1c15dd20c389c477a219980a228c098123a4","observation_id":"dbcc846a-4bfa-4de9-96ac-d2d87701adc0","resolution":{"observed_at":"2026-08-07T05:04:46.259351Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.246328Z","title":null,"venue":null,"work_id":"d35658c6-fa5e-4abf-9e36-a1953c7fe681","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.632086Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:76c9f9bfa41cc8738fac1f4b3e4678a7fdbb70626d7dca64be36808f98891bbe","observation_id":"429e57b8-1d0a-4f32-a9f9-2158739892e1","resolution":{"observed_at":"2026-08-07T05:04:46.249438Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.237731Z","title":null,"venue":null,"work_id":"199f1698-8b09-41e2-b4c1-c211a418c556","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.634882Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:f29cdadf5394742692444cf3a161af56b8e5154d865ca1e84fabc2d17b753c53","observation_id":"2ad68e39-8500-4c86-9dd7-b8364ccd5a49","resolution":{"observed_at":"2026-08-07T05:04:46.240571Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.228242Z","title":"In: USENIX Security (2007)","venue":null,"work_id":"c2ef2349-6261-470f-8fc8-0dcf3c45ce67","year":2007},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.638174Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:d1dd87381efb714ca59265f534e263d0f74d58e2e741c2bfcb0f5e35d9cd12b4","observation_id":"92251ebe-5b4d-4e1e-b33d-811f82324fb5","resolution":{"observed_at":"2026-08-07T05:04:46.231368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.218828Z","title":"In: NDSS Symposium (2008)","venue":null,"work_id":"7007ed55-6191-4dc3-ae94-d70fe9e45978","year":2008},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.641450Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:653fd3a72a4817ddf3b22a7706b3b4b9c7a0a622e5567ae5ced2e110b9c4d379","observation_id":"3ab47eb7-be1a-4c86-ba1c-f18666c55dda","resolution":{"observed_at":"2026-08-07T05:04:46.222077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.210159Z","title":null,"venue":null,"work_id":"07e117b4-00f7-44aa-a1d4-3bc4f7619440","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.644737Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:3cba8ed3757d5e1be4d1b97b830838e8620d6b51a79856daec66d540bdbd7da9","observation_id":"07386d63-e5ba-4de5-86dd-ff0e3544ccb8","resolution":{"observed_at":"2026-08-07T05:04:46.213061Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.201527Z","title":"In: Advances in Information and Comput","venue":null,"work_id":"3e159481-d8cd-43fa-9145-600cc1fb52a4","year":2007},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.647817Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:d903bedd0c87493f84849704f0bf49c7ff9f3570fe9e2b3d8bcd4244874b64eb","observation_id":"58d0d755-a914-4083-bb1a-0217c2c92304","resolution":{"observed_at":"2026-08-07T05:04:46.204594Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.193397Z","title":null,"venue":null,"work_id":"30f406ef-0391-4ea5-85bc-831f3f5201d5","year":2024},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.650816Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:02053d26f69bdbb2d7ccbcaa77ba1f4559369dbe81e60f3b4a256e29199299dc","observation_id":"38756f5d-2015-486b-8bb0-d1c8a94e5051","resolution":{"observed_at":"2026-08-07T05:04:46.196086Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.184207Z","title":"In: Machine Learning for Networking (2020)","venue":null,"work_id":"ba575816-fbf0-40ff-87e8-fbe31e11c4aa","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.653967Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:1aa1b4e3f17edffebdb84539dedca9b323a6661c4fb8a8b941ac4e8e83c1c6bd","observation_id":"7ba0e903-00da-492d-b6bb-a4e2b3ba6b32","resolution":{"observed_at":"2026-08-07T05:04:46.187464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.175365Z","title":null,"venue":null,"work_id":"eae600b3-e030-4a67-ba22-61643298b874","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.657285Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:e35a477a5fdc64bad4f9a595ddb3393d9cff7cdba4c9bf309f08b3ddb3fc03a0","observation_id":"03c09f05-af55-460a-a630-e1c150c43711","resolution":{"observed_at":"2026-08-07T05:04:46.178144Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.166280Z","title":"In: LCN (2006)","venue":null,"work_id":"be026eec-f2ce-49ee-bc87-98d63d9d295b","year":2006},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.660327Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:218528d9971f43c7b6678e70cc4224d663b871838f0342c489f10a17e9924c8c","observation_id":"e4e7d230-8651-4c47-b32c-3f029e2e07ac","resolution":{"observed_at":"2026-08-07T05:04:46.169339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.157427Z","title":null,"venue":null,"work_id":"ccf6016e-8fbe-4b70-8fb4-257949f6af6b","year":2021},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.663540Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:dcb9530178e83bbd2bd4f9216678678048a85e67593d01c6fb931274367ba009","observation_id":"927ae20c-39c7-43c5-8752-4249c28f5bf9","resolution":{"observed_at":"2026-08-07T05:04:46.160366Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.147836Z","title":"Open Computer Science (2014)","venue":null,"work_id":"7a2e3789-a7ea-4088-af9f-21bfd48efb28","year":2014},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.666817Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:8fdbdf3a9583833ec11dd8fc9bce85cf64046b2f37f685c2b814bf3b32b6c1c3","observation_id":"8fdb88b5-20e1-4e65-8441-a1cddc732422","resolution":{"observed_at":"2026-08-07T05:04:46.150915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.139264Z","title":null,"venue":null,"work_id":"469c800d-299b-41bb-8378-1034d3688036","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.669714Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:663469cee42a543ae082f935d21a5ca5629e6c62046502b854114b4883c1a025","observation_id":"c32912c1-f054-4008-903c-d60b23f22089","resolution":{"observed_at":"2026-08-07T05:04:46.142200Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.129086Z","title":null,"venue":null,"work_id":"300b3403-6032-4f5a-af58-7eac7a6f948a","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.672663Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:00144ac94c3a4d149301109636c46ff6f4960555a92aa5bea2dc5ad759205a45","observation_id":"1817bfb2-f8fe-4e68-8e1f-81d11b95f139","resolution":{"observed_at":"2026-08-07T05:04:46.132692Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.119730Z","title":null,"venue":null,"work_id":"aa5fda18-dd18-4b10-97e4-7abcdde28cba","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.675627Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:95097f493a01025162ec8d99f70185415753bc096d4c31b455af17e1f61a55ae","observation_id":"07e4908d-ad5c-4913-b89e-cf6927fe3897","resolution":{"observed_at":"2026-08-07T05:04:46.122957Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.110009Z","title":null,"venue":null,"work_id":"55d53652-6201-41c5-9aa6-331261a38073","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.678444Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:0c47fb31bbdb7655c37bb3b3dc9f173a807b1a7d12707be7313a37b208ec3f8b","observation_id":"7e03863a-b882-4013-a1ce-3f910cce3829","resolution":{"observed_at":"2026-08-07T05:04:46.113510Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.100239Z","title":null,"venue":null,"work_id":"bfb04672-31e7-4a8e-8884-4f02f003f17f","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.681427Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:eb3d7f22b0af7e534c1edad24fd4e7ef21c5c7f7de6dd8c3bffc5c0ee1fc1963","observation_id":"43cba496-2e7a-470c-8910-232cf7b287e4","resolution":{"observed_at":"2026-08-07T05:04:46.103359Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.091334Z","title":null,"venue":null,"work_id":"a4ff6ad0-f276-4908-89ce-44d77b9aa780","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.684208Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:9660def7cd11b290f8458577a6cc85a412d1310e9c3e1c842c974fd039a094bc","observation_id":"1ee5eb69-0ad8-4e3a-bdf9-956e8e18e4b3","resolution":{"observed_at":"2026-08-07T05:04:46.094319Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.081625Z","title":null,"venue":null,"work_id":"8c4331e9-f377-4010-861e-b4b724205589","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.687400Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:9d552a3334a114c947156ee8846cb57bf649550ec5e7d69bd5ce8e287fe37223","observation_id":"f80bcd2b-003e-4224-986f-a55483383c24","resolution":{"observed_at":"2026-08-07T05:04:46.084836Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.071384Z","title":null,"venue":null,"work_id":"c3c4b35c-55ab-4db5-ba22-f541da61841e","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.689978Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:1d7944707d27546591012cf3b16e1464ae04d22fdc1864dfe38bd5f267fce900","observation_id":"49411ed7-9999-4f3d-8ed5-ef678a2e67df","resolution":{"observed_at":"2026-08-07T05:04:46.075017Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.061553Z","title":null,"venue":null,"work_id":"9d293a0d-29c2-4d08-b5ba-5c29833fbfe6","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.692816Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:0b87a58729f8f1d66d4b2f420812a702b5fd48138b58c1283998bb9f07e1e74d","observation_id":"8eca8bed-079f-4083-ac2c-951c2af13af8","resolution":{"observed_at":"2026-08-07T05:04:46.064909Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.051513Z","title":null,"venue":null,"work_id":"e45b5096-e465-491e-aba4-3de31326dd2a","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.695545Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c8471d3787a59d8f5e5e4340035aef1002dc94f1fa459573f6e8bc984728dcbd","observation_id":"2312393f-b87e-4ac4-ab72-e3329aa7eb69","resolution":{"observed_at":"2026-08-07T05:04:46.054911Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.041738Z","title":null,"venue":null,"work_id":"259fab39-e99c-4a30-be4b-b476215c428e","year":2006},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.698221Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:b8d50c15646065d28673327a891e2e26bbd2d3c0a322ebcf21ccfeb57ed08e2b","observation_id":"8e059746-33c5-4d02-900f-8aecec7c7f77","resolution":{"observed_at":"2026-08-07T05:04:46.045253Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.033089Z","title":null,"venue":null,"work_id":"f43f1826-9a94-4099-99c9-6e3fa1b0c7ff","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.700868Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:96a8bdf730426aec7f202db6ae4cb766bc533125cdb905fa651587d8557d1a88","observation_id":"9228d476-22fd-45bb-8a57-0d908e4e374f","resolution":{"observed_at":"2026-08-07T05:04:46.035809Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.023653Z","title":"In: EUC 2021","venue":null,"work_id":"ce40227d-af62-4198-b790-7f8c70d91799","year":2021},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.703564Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:0e9c46fd854d0659febba149ce72d6912125113c908bc7101df21b81aa563193","observation_id":"eb64d68c-9fa9-4788-b092-824ac731fef2","resolution":{"observed_at":"2026-08-07T05:04:46.026821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.013947Z","title":null,"venue":null,"work_id":"9bfee0c0-c05b-4493-8405-11f05a51ffff","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.706516Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:118887d8e6b97d2aedb9bfdb6b85c060fa7d26882c48ea9bc2d8674e6ee3c1c1","observation_id":"3dd093e1-7896-4314-918d-3d6f4e30ec9d","resolution":{"observed_at":"2026-08-07T05:04:46.017481Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:46.003237Z","title":"In: Machine Learning for Networking (2022)","venue":null,"work_id":"401c55bd-2bbb-47dd-9cda-3f16027b3095","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.709426Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:f722810201695bf237bae9e1dbb5df6d984d158f1d97bcdd56d7e4c00e32bb07","observation_id":"05597811-793e-48ec-a8fc-d352258600fc","resolution":{"observed_at":"2026-08-07T05:04:46.006761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.991832Z","title":"In: ICMLA (2023)","venue":null,"work_id":"98887a55-1e15-4ae0-9a29-16ca6ce3b6d8","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.712255Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:ee009013a26e5c28bc0e7c18cf5ce06d72f7188272d260cb9c9042fc519f5015","observation_id":"90751392-f226-44fe-a72e-b1da85dd8dfd","resolution":{"observed_at":"2026-08-07T05:04:45.995584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.981439Z","title":null,"venue":null,"work_id":"82f6d70e-f15b-46e1-9c89-d0f060e4831f","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.715108Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:9a2b091738ebd445c80abd65a51e3d382daf850c8761f1858d19ab1aab9607c2","observation_id":"87213184-3471-4632-bfc0-aaf40f4c5120","resolution":{"observed_at":"2026-08-07T05:04:45.984555Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.971650Z","title":null,"venue":null,"work_id":"09ed628b-9b9d-4938-a17e-1505ca496cb4","year":2020},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.718058Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:954ce11a5a9a1cb311ecf5165120fc1597c4e619784190b0d3cc4191af5e49df","observation_id":"208bdb65-80e0-4e27-8769-5be90b7f7814","resolution":{"observed_at":"2026-08-07T05:04:45.975086Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.962375Z","title":null,"venue":null,"work_id":"74066c27-5651-42cc-91a5-280c77d69119","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.720827Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:01fb63332e4510936e1ee74ae5c05e7ae5ce34478a3e97a821b49534e9fdbae3","observation_id":"40011b0e-54ec-4c4a-a6f2-10d0771af0f2","resolution":{"observed_at":"2026-08-07T05:04:45.965482Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.953471Z","title":"In: Advances in Cryptology","venue":null,"work_id":"c1488cda-5ce8-4ecd-9523-593c382fbd84","year":1984},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.723724Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:941febab7e609f35f6c94971b166c02c7613093791fd36b8b75df6c2cc0072e3","observation_id":"1f257c80-05e9-4f30-9a37-8d634945e5a2","resolution":{"observed_at":"2026-08-07T05:04:45.956360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.944058Z","title":"In: PAM 2023 (2023)","venue":null,"work_id":"8a47ae46-433f-449b-bf71-d947b86f107d","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.726575Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:2b9739614a8be5b3b360a51fed87271a0f759eb609ad036415a5e0cda7579963","observation_id":"ad5ace56-2b87-4957-a09a-8fb406fef898","resolution":{"observed_at":"2026-08-07T05:04:45.947037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.935285Z","title":"In: TMA 2022 (2022)","venue":null,"work_id":"f7aed82c-1ae7-4c0b-bf6b-a9eb76888881","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.729372Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:76565a44f49376f6d1c1ded351de0c5915d0e03540e7a80f30f88e072dc13782","observation_id":"887c4d0a-557c-440b-bd23-c95a9dd6c4b9","resolution":{"observed_at":"2026-08-07T05:04:45.938218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.926775Z","title":null,"venue":null,"work_id":"28873908-66c1-43e2-8f3b-362f0cff0346","year":1998},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.732435Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:4370d8b44d5687f5090b79adc8f8669f530f9fe53660ef2126c1e7f1d5615614","observation_id":"43fc5ca4-eccb-4ca2-a20d-0896e59281fe","resolution":{"observed_at":"2026-08-07T05:04:45.929639Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.917544Z","title":null,"venue":null,"work_id":"1d561c98-87ab-4f63-9504-7d9a68ce24b8","year":2015},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.735464Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:d600a7f1c0127fe94b6c9ec382a5d59f0bbfe61ec3c9419872c72fed187287b9","observation_id":"12e39c57-3db6-4173-89ab-05ef7cbda8c1","resolution":{"observed_at":"2026-08-07T05:04:45.920502Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.909008Z","title":null,"venue":null,"work_id":"1c61a88a-b75e-40af-ab0e-aa7bcfa4baf4","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.738093Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:770edae67a88ef72be15405d2a6be0e1c9ca94f561d9761cd7539e2e685b00b6","observation_id":"dc4cd9bc-51ef-43de-b54f-870050987b0b","resolution":{"observed_at":"2026-08-07T05:04:45.911863Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.899857Z","title":null,"venue":null,"work_id":"b0eff4e3-361d-4c2b-8d14-7c8d119a9724","year":2021},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.740908Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:edf37714beb3a5c784662ca56e80217dc5f6e92e67d6605549af71edf9f67b51","observation_id":"f34eb6be-63c6-4594-8bc1-46411670f642","resolution":{"observed_at":"2026-08-07T05:04:45.903117Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.890244Z","title":null,"venue":null,"work_id":"d84710d6-8582-4a2c-af27-58dd9cb43486","year":2022},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.743968Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:4629a2adab87a648fcb8f37a9e87923765202c44a1a13f38c11805f7676dbe80","observation_id":"addf0cdc-4080-4b31-9dcc-db56158b8de4","resolution":{"observed_at":"2026-08-07T05:04:45.893433Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.881093Z","title":null,"venue":null,"work_id":"eeae03c9-11b2-4b90-8757-e39a0a31f112","year":2015},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.746778Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:b4468d29ae928e11d7ec89b73c14e6367f6af68a792b31897f5a3254b5f1b313","observation_id":"2da59971-cc8e-4703-8dfd-cd9b25d4283f","resolution":{"observed_at":"2026-08-07T05:04:45.883954Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.870240Z","title":null,"venue":null,"work_id":"8ff6c5e6-2b82-4e6b-af63-6c81de8b6b84","year":2023},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.749807Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:21524874c0d78f07e3fd4851472ef4ff72b0b49a7b565cacf744bc763c1c1d3c","observation_id":"9f1baae1-a2ea-4391-a691-bc0636f25ba7","resolution":{"observed_at":"2026-08-07T05:04:45.873537Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.860587Z","title":"In: RAID (2004)","venue":null,"work_id":"58cf5915-5c83-457a-8715-485b73a2a9f5","year":2004},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.752883Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c2de60d18b41778fa300490a30f46616c5eb08b4a4f06fb3a69936a742e9e233","observation_id":"5b60dbe8-8a50-4073-861b-cdbe18f57463","resolution":{"observed_at":"2026-08-07T05:04:45.864043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.850701Z","title":null,"venue":null,"work_id":"316c9682-04e1-4ecb-ae3a-209421213407","year":2011},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.756756Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:1c908ab946630b1dcc9f674afebbbb30179625d09b7953f4e3e732c964a86c6e","observation_id":"67a09f65-c26f-4231-8e39-444b320b44fe","resolution":{"observed_at":"2026-08-07T05:04:45.853826Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.840367Z","title":null,"venue":null,"work_id":"2385f8fe-2629-43c4-a438-bfa27d225f25","year":2024},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.760728Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:252440728b7b37ada10a607e297a6284512cd416304a2385d4e3f5e4c86238a5","observation_id":"2ccb997d-9f66-45c2-bbf7-e679ca8976de","resolution":{"observed_at":"2026-08-07T05:04:45.843414Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.830766Z","title":null,"venue":null,"work_id":"8c171e57-4e5d-4a33-a66a-19f60c978228","year":2007},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.763672Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c0396e4e1bf539bd847b40040c9f5110a96679aaa4619e595204d1760a6837c1","observation_id":"eb488340-4ef9-4d94-8aa3-4409a389c687","resolution":{"observed_at":"2026-08-07T05:04:45.833886Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.820052Z","title":null,"venue":null,"work_id":"cb86b649-5fcf-454b-a841-d50c3d9acde8","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.766499Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:0fbab30c0d2f585221d2e11216023d78368212f7e705cded1ffd2da7465263a7","observation_id":"d0d90586-d565-4655-9f54-cc4165eed396","resolution":{"observed_at":"2026-08-07T05:04:45.823420Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.810099Z","title":null,"venue":null,"work_id":"fdf7260b-6ec5-4af4-b558-88138be1fb4f","year":null},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.769486Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:c74861df492db9dbc88ee3f757cfdb79d369df811138eef190d06698aa6268e2","observation_id":"2895df39-dc17-480c-83f7-e0a3bab9c7b2","resolution":{"observed_at":"2026-08-07T05:04:45.813532Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:04:45.799066Z","title":null,"venue":null,"work_id":"ff5c58fc-0ba6-42b4-9a47-9027a58b7a81","year":2013},"citing_paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T05:04:45.772349Z"},"links":{"citing_paper":"/paper/2506.08922"},"observation_digest":"sha256:d4ab77a794e892edf663da93ec4610e3366cf7a390c9a376493689315c49637a","observation_id":"e1f863ac-4787-485c-9286-154d34a3b5ed","resolution":{"observed_at":"2026-08-07T05:04:45.803263Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.08922","last_updated":"2025-06-10T15:47:22Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T04:56:37.529698Z","submitted_at":"2025-06-10T15:47:22Z","title":"Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels"},"reference_resolution":{"displayed":74,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":52,"verified_exact":0,"verified_fuzzy":22},"total_outbound_references":74},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 74 of 74 outbound references and 0 inbound Pith citation observations for arXiv:2506.08922."}