Paper Citation Record · LEDGER

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning

As of 7 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2606.08649.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.08649 v1

Coverage vector

measured 47 of 47 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T18:01:40.448082Z

measured 47 of 47 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

47 of 47 outbound references displayed

verified exact2
verified fuzzy0
unresolved45
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 16ed2058-b311-47fa-8630-3d479c048867 · outbound

This paper cites Davidoff and J.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Davidoff and J

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b806c713-5dcd-4b00-bef2-3c772e36a03d · outbound

This paper cites A cloud-based triage log analysis and recovery framework,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A cloud-based triage log analysis and recovery framework,

Reference 2

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0ec944e9-ffb9-43c2-bf5b-c7fc42a022fe · outbound

This paper cites An empirical investigation of incident triage for online service systems,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning An empirical investigation of incident triage for online service systems,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 583cf370-5a83-4bb6-a976-232379383838 · outbound

This paper cites an unresolved cited work.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Unresolved cited work

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d76115f4-917b-4143-9fa0-a122de689597 · outbound

This paper cites doi:10.6028/NIST.SP.800-86 , url=.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning doi:10.6028/NIST.SP.800-86 , url=

Reference 5

Resolution: verified exact; doi, observed 2026-06-27T18:21:08.513548Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 034a01b4-057d-4f9d-af9c-1ba8aead002d · outbound

This paper cites Learning from experts’ experience: toward automated cyber security data triage,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Learning from experts’ experience: toward automated cyber security data triage,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2908eabd-f4ce-458f-b08d-000475095663 · outbound

This paper cites eur-lex.europa.eu,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning eur-lex.europa.eu,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 81383ad8-8456-4c54-b303-a8a3da7289a5 · outbound

This paper cites Detecting large-scale system problems by mining console logs,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Detecting large-scale system problems by mining console logs,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d28748ae-38e6-418b-9617-29ea00369bed · outbound

This paper cites YARA - The pattern matching swiss knife for malware re- searchers — virustotal.github.io,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning YARA - The pattern matching swiss knife for malware re- searchers — virustotal.github.io,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 75eca806-d1e6-42ab-85fd-b5a8119ec176 · outbound

This paper cites Explore Sigma - generic signature format for siem systems,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Explore Sigma - generic signature format for siem systems,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f2743902-874b-44fd-8dee-31075b3b7c9b · outbound

This paper cites Web server attack detection using machine learning,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Web server attack detection using machine learning,

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a13b5a97-9261-4b6f-8041-d0503e1bf122 · outbound

This paper cites Machine learning to detect anomalies in web log analysis,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Machine learning to detect anomalies in web log analysis,

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 79907d8d-aa9a-43d2-a6cb-668b4d4d34c3 · outbound

This paper cites Experience report: System log analysis for anomaly detection,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Experience report: System log analysis for anomaly detection,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation daab6040-207c-4efa-9997-fe9668cd8411 · outbound

This paper cites Self- attentive classification-based anomaly detection in unstructured logs,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Self- attentive classification-based anomaly detection in unstructured logs,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8e640662-89ab-4dd1-a817-5d54bbf62d93 · outbound

This paper cites Deep learning for anomaly detection in log data: A survey,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Deep learning for anomaly detection in log data: A survey,

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6aa4ae22-9784-4e95-8a58-46e06651e0ff · outbound

This paper cites Log-based anomaly detection with deep learning: How far are we?.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Log-based anomaly detection with deep learning: How far are we?

Reference 16

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a90ae30-73a8-42ef-adcc-9b35ad7de7af · outbound

This paper cites A survey on evaluation of large language models,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A survey on evaluation of large language models,

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 87a8ac84-571b-40bc-b480-4e788b287b21 · outbound

This paper cites Chatgpt for digital forensic investigation: The good, the bad, and the unknown,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Chatgpt for digital forensic investigation: The good, the bad, and the unknown,

Reference 18

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e9b8dbda-51a0-40e2-b1d2-ab63431ba85d · outbound

This paper cites Language mod- els are few-shot learners,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Language mod- els are few-shot learners,

Reference 19

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e5fbd5c-8b7a-4e40-8a8f-8c5e2f380f82 · outbound

This paper cites volgpt: Evaluation on triaging ransomware process in memory forensics with large language model,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning volgpt: Evaluation on triaging ransomware process in memory forensics with large language model,

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aad85461-94a0-4033-8021-4514386393ef · outbound

This paper cites LogLLM: Log-based Anomaly Detection Using Large Language Models.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning LogLLM: Log-based Anomaly Detection Using Large Language Models

Reference 21

Resolution: verified exact; arxiv_id, observed 2026-07-02T23:47:27.312144Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 43ef8b26-813b-4fd7-95c2-01a274bf77a1 · outbound

This paper cites Logprompt: Prompt engineering towards zero-shot and interpretable log analysis,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Logprompt: Prompt engineering towards zero-shot and interpretable log analysis,

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 443e66ed-b722-41e0-85ae-ed785386ed1c · outbound

This paper cites Llm-lade: Large language model-based log anomaly detection with explanation,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Llm-lade: Large language model-based log anomaly detection with explanation,

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c89f90a2-aa37-4cfc-b144-3961fd46ff08 · outbound

This paper cites Chatgpt, llama, can you write my report? an experiment on assisted digital forensics reports written using (local) large language models,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Chatgpt, llama, can you write my report? an experiment on assisted digital forensics reports written using (local) large language models,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d49f256-4624-487b-abc7-2b5a3b5983ef · outbound

This paper cites Online system problem detection by mining patterns of console logs,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Online system problem detection by mining patterns of console logs,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0bfacd20-d741-4ca6-96d9-7a8f544e7c06 · outbound

This paper cites What supercomputers say: A study of five system logs,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning What supercomputers say: A study of five system logs,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cc33dc78-2608-4ca4-a51f-556945d85e6f · outbound

This paper cites Deeplog: Anomaly detection and diagnosis from system logs through deep learning,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Deeplog: Anomaly detection and diagnosis from system logs through deep learning,

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 443156d7-549f-4112-a63c-9952803fbaf2 · outbound

This paper cites A self-learning anomaly-based web application firewall,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A self-learning anomaly-based web application firewall,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e78da6b0-6be7-4fdd-8ec4-db435e7fdd9c · outbound

This paper cites Identifying user behavior by analyzing web server access log file,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Identifying user behavior by analyzing web server access log file,

Reference 29

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0e73f47b-35d0-4be4-b668-03e6623a937a · outbound

This paper cites Llm meets ml: Data- efficient anomaly detection on unstable logs,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Llm meets ml: Data- efficient anomaly detection on unstable logs,

Reference 30

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 382983a1-0f11-4ccb-b9e4-1ebcbf46c742 · outbound

This paper cites A web attack detection technology based on bag of words and hidden markov model,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A web attack detection technology based on bag of words and hidden markov model,

Reference 31

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1d060968-b19b-424d-9992-cda0600a325b · outbound

This paper cites A novel architecture for web-based attack detection using convolutional neural network,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A novel architecture for web-based attack detection using convolutional neural network,

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a26be830-b5ab-4b82-b4c7-b4a28b80a2a0 · outbound

This paper cites Web attack detection using deep learning models,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Web attack detection using deep learning models,

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 33b9c3be-e183-45a5-bd38-5965b1dc2b3a · outbound

This paper cites Detecting web attacks with end-to-end deep learning,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Detecting web attacks with end-to-end deep learning,

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e10d4e26-cac4-4096-a9f0-ff13fe4b31d7 · outbound

This paper cites A comparative analysis of various machine learning methods for anomaly detection in cyber attacks on iot net- works,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A comparative analysis of various machine learning methods for anomaly detection in cyber attacks on iot net- works,

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f026cb85-e04f-4026-ac7c-90a7ec4692cb · outbound

This paper cites Evaluation of machine learn- ing algorithms for anomaly detection,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Evaluation of machine learn- ing algorithms for anomaly detection,

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 512ae559-d042-4252-9fa5-896d0944a2d1 · outbound

This paper cites Llmelog: An approach for anomaly detection based on llm-enriched log events,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Llmelog: An approach for anomaly detection based on llm-enriched log events,

Reference 37

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 636e6cf6-3271-4678-bc38-5262a249ced2 · outbound

This paper cites Loggpt: Exploring chatgpt for log-based anomaly detection,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Loggpt: Exploring chatgpt for log-based anomaly detection,

Reference 38

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b7d344e6-942c-4d59-ae82-a46659addacf · outbound

This paper cites Raglog: Log anomaly detection using retrieval augmented generation,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Raglog: Log anomaly detection using retrieval augmented generation,

Reference 39

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a444149-5711-4705-8058-25c6becbc257 · outbound

This paper cites A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions,

Reference 40

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbb60ac8-3169-443f-b4f5-e380806a64ea · outbound

This paper cites Analyzing web traffic ecml/pkdd 2007 discovery challange,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Analyzing web traffic ecml/pkdd 2007 discovery challange,

Reference 41

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8ec615be-0cbf-482b-857e-b2be8b35f961 · outbound

This paper cites The freebsd project: A replication case study of open source development,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning The freebsd project: A replication case study of open source development,

Reference 42

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a00a19a2-d605-400a-a9f6-f2279dff50de · outbound

This paper cites Kenler and F.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Kenler and F

Reference 43

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 252bfffe-82f2-4fd0-a742-9d0a6287e35c · outbound

This paper cites Postgresql,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Postgresql,

Reference 44

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 91ae7e96-edd9-43a8-97e8-dc34c37a6d85 · outbound

This paper cites Carlson,Redis in action.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Carlson,Redis in action

Reference 45

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3875a7be-fde4-48a9-9b03-b8e6a91c06f6 · outbound

This paper cites Commix: automating evaluation and exploitation of command injection vulnerabilities in web applications,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Commix: automating evaluation and exploitation of command injection vulnerabilities in web applications,

Reference 46

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fc4c3e29-98d0-4542-9542-712478e7df05 · outbound

This paper cites Http extensions for distributed authoring–webdav,.

Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning Http extensions for distributed authoring–webdav,

Reference 47

Resolution: unresolved; no resolver link, observed 2026-06-27T18:01:40.448082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.