{"as_of":"2026-08-07T15:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:94629a588ddfdfa10431193a8f34275811f8cee16fa0c4c34639c52b19cce95c","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T18:01:40.448082Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.08649/citation-record","integrity":"/paper/2606.08649/integrity","json":"/paper/2606.08649/citation-record.json","paper":"/paper/2606.08649"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Davidoff and J","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:6f45570fd567315d45f8e0663718a9d383c2e869b3a0e8646b670329982a8d69","observation_id":"16ed2058-b311-47fa-8630-3d479c048867","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A cloud-based triage log analysis and recovery framework,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:5c252c9de47d04b6718be97942cdc49b33fe441ebca8dec987de6798a4aebda2","observation_id":"b806c713-5dcd-4b00-bef2-3c772e36a03d","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"An empirical investigation of incident triage for online service systems,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:76f8921fcaa96e42f6b1425a30e6e3dd45342566394410cdea7fc9d482e053f0","observation_id":"0ec944e9-ffb9-43c2-bf5b-c7fc42a022fe","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:ac53a018347f62444e185c3c75f9cd4d6f55ecbf5d666eca50a68fd418aabd88","observation_id":"583cf370-5a83-4bb6-a976-232379383838","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.6028/nist.sp.800-86","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"doi:10.6028/NIST.SP.800-86 , url=","venue":null,"work_id":"e4622ddc-1747-4a60-979d-c7e38ca4711d","year":2006},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:6a8d2145c62c4f8e577b621053dc6e3650c8ea850f817cbaecb3bd3dcb0204bf","observation_id":"d76115f4-917b-4143-9fa0-a122de689597","resolution":{"observed_at":"2026-06-27T18:21:08.513548Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Learning from experts’ experience: toward automated cyber security data triage,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:d50ad2f09cdf1d32d1ab8508af0c65bafa28214328789db904cda934bb4b8c2f","observation_id":"034a01b4-057d-4f9d-af9c-1ba8aead002d","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"eur-lex.europa.eu,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:3010a6257f061e78033309bcbcc6232d15e0964325190782a244229e9f4377d9","observation_id":"2908eabd-f4ce-458f-b08d-000475095663","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Detecting large-scale system problems by mining console logs,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:8f659560cdc25bb217ae3a038c5a19b1289fb784bea48f7c6e1ec956d364d02b","observation_id":"81383ad8-8456-4c54-b303-a8a3da7289a5","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"YARA - The pattern matching swiss knife for malware re- searchers — virustotal.github.io,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:a1e50c4f18e317d8f2f72413e303eb271effbbce3b480995d9d6161f93641581","observation_id":"d28748ae-38e6-418b-9617-29ea00369bed","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Explore Sigma - generic signature format for siem systems,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:bfb316004864c7cfa4d08821c2b190948093c6c45410ddad49690ceb47a2bc55","observation_id":"75eca806-d1e6-42ab-85fd-b5a8119ec176","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Web server attack detection using machine learning,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:071f57ed64b889cef1e776aa2acdcce908c50340eb6e40d9a1ec7835bcfec809","observation_id":"f2743902-874b-44fd-8dee-31075b3b7c9b","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Machine learning to detect anomalies in web log analysis,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:94d1d212551c86298b55f337421aef90879dfb3beb98db29d8d2e385f91107d8","observation_id":"a13b5a97-9261-4b6f-8041-d0503e1bf122","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Experience report: System log analysis for anomaly detection,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:2b6ff3a7902a6e672435ef6773473ea5e4881510a54691b728451fbd7133bedc","observation_id":"79907d8d-aa9a-43d2-a6cb-668b4d4d34c3","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Self- attentive classification-based anomaly detection in unstructured logs,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:75c666bc69781f37b1fce541d9490ae78a7f8eb376724f50e12b851b955d0dea","observation_id":"daab6040-207c-4efa-9997-fe9668cd8411","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Deep learning for anomaly detection in log data: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:a6c2f56a321aaa1d9c171b92be9a1fb0d9275d211e193b2811a48720069028e2","observation_id":"8e640662-89ab-4dd1-a817-5d54bbf62d93","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Log-based anomaly detection with deep learning: How far are we?","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:15d3c1b0a793460ab731ae083771b55e347438206044b12a7835c17fe387b50c","observation_id":"6aa4ae22-9784-4e95-8a58-46e06651e0ff","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A survey on evaluation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:94c811e8490c6cc0d7249fe4e284cc6a5089934a4bcb2740e362c975c03b18e4","observation_id":"3a90ae30-73a8-42ef-adcc-9b35ad7de7af","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Chatgpt for digital forensic investigation: The good, the bad, and the unknown,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:acb352cfa2db71609f65f838f44dd77861822075f2dfb7544f6890694667fe17","observation_id":"87a8ac84-571b-40bc-b480-4e788b287b21","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Language mod- els are few-shot learners,","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:3520a7778c4127b004fb36046461f8d4f2ef191378c20017db7222bf527e5584","observation_id":"e9b8dbda-51a0-40e2-b1d2-ab63431ba85d","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"volgpt: Evaluation on triaging ransomware process in memory forensics with large language model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:c4419c76e567cd29242ddc7789db17c5e66a85fa3b972a7bd2f86638ab20cc93","observation_id":"9e5fbd5c-8b7a-4e40-8a8f-8c5e2f380f82","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.08561","last_updated":"2025-04-14T02:52:50Z","snapshot_observed_at":"2026-08-07T03:25:42.519856Z","submitted_at":"2024-11-13T12:18:00Z","title":"LogLLM: Log-based Anomaly Detection Using Large Language Models","version":5},"cited_work":{"arxiv_id":"2411.08561","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.08561","snapshot_observed_at":"2026-07-09T00:25:48.473703Z","title":"LogLLM: Log-based Anomaly Detection Using Large Language Models, April 2025","venue":"cs.SE","work_id":"9345a0c7-0b9f-421a-9558-ab88528893c7","year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"cited_paper":"/paper/2411.08561","citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:7d7e9516615fad2c253b36ecdfb56680daa364c464675f935001d989e55278eb","observation_id":"aad85461-94a0-4033-8021-4514386393ef","resolution":{"observed_at":"2026-07-02T23:47:27.312144Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Logprompt: Prompt engineering towards zero-shot and interpretable log analysis,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:7f56ec19a05e7f1da011156c05d0172efbdd960c90551f9ca14e643fb71145cc","observation_id":"43ef8b26-813b-4fd7-95c2-01a274bf77a1","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Llm-lade: Large language model-based log anomaly detection with explanation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:22092f0c97b152f13d300b6dc080b113628dff4084063ad319bcf95b25f8176c","observation_id":"443e66ed-b722-41e0-85ae-ed785386ed1c","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Chatgpt, llama, can you write my report? an experiment on assisted digital forensics reports written using (local) large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:b457b8ae38e2b60c58437f5ada9d78730d653bed811d456aba821090ce2a1c41","observation_id":"c89f90a2-aa37-4cfc-b144-3961fd46ff08","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Online system problem detection by mining patterns of console logs,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:0db5ddd97d5d7002f8ef53640458da10605d10da666113cbe206d16e24f2b1dc","observation_id":"2d49f256-4624-487b-abc7-2b5a3b5983ef","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"What supercomputers say: A study of five system logs,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:6c24a2a3dcf89889c79c1aaf90116937acba74c4bd78f781b6ffb9ccfce6f823","observation_id":"0bfacd20-d741-4ca6-96d9-7a8f544e7c06","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Deeplog: Anomaly detection and diagnosis from system logs through deep learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:05ee040994c38885c85f1d20773aa609d8ba91da8e1cb1313addeac94a29603b","observation_id":"cc33dc78-2608-4ca4-a51f-556945d85e6f","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A self-learning anomaly-based web application firewall,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:aea91483b8e7d2e2bd2df3674e5c9473d8be34507c510e364d55629af8bc6376","observation_id":"443156d7-549f-4112-a63c-9952803fbaf2","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Identifying user behavior by analyzing web server access log file,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:789c95031eb9ca22d524dbf0fd6032ba356107c8d990bfcf1da62f280e8d3165","observation_id":"e78da6b0-6be7-4fdd-8ec4-db435e7fdd9c","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Llm meets ml: Data- efficient anomaly detection on unstable logs,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:b1ceb3eacbd56a5396e3847ead077a541f7b323bfaa5f7556c402d143bc70fa9","observation_id":"0e73f47b-35d0-4be4-b668-03e6623a937a","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A web attack detection technology based on bag of words and hidden markov model,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:d1c31ca9a51b701230cc3bdd9fce5156c476c561a43ce4cbb5ff8c4a5e0b673f","observation_id":"382983a1-0f11-4ccb-b9e4-1ebcbf46c742","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A novel architecture for web-based attack detection using convolutional neural network,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:818669f22f3081b7986a61b23e5450a40e18d8eca4eb2ead2b329550ea663ea6","observation_id":"1d060968-b19b-424d-9992-cda0600a325b","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Web attack detection using deep learning models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:063910f914b6e8d7e81c7f509af694d4bc68fef6b78a84fb2d15f13485209ee9","observation_id":"a26be830-b5ab-4b82-b4c7-b4a28b80a2a0","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Detecting web attacks with end-to-end deep learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:caf7795a06c726d79cc2c74f115076e6ae2f546659a7083013c8926759bc326e","observation_id":"33b9c3be-e183-45a5-bd38-5965b1dc2b3a","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A comparative analysis of various machine learning methods for anomaly detection in cyber attacks on iot net- works,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:7ddc5db4b7ee595f52fb5e4a98887223485108801064a1a2c6c40f056f4b836c","observation_id":"e10d4e26-cac4-4096-a9f0-ff13fe4b31d7","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Evaluation of machine learn- ing algorithms for anomaly detection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:d2d0eb118ffebf34213cfe13e4f1c104bc1e82629ee710514e4b203769105af7","observation_id":"f026cb85-e04f-4026-ac7c-90a7ec4692cb","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Llmelog: An approach for anomaly detection based on llm-enriched log events,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:1af90c792dd9f0814fd417082051eaa1bdecf31e0d7c0cd665bca687fbcab2bd","observation_id":"512ae559-d042-4252-9fa5-896d0944a2d1","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Loggpt: Exploring chatgpt for log-based anomaly detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:9b36faebd7bc519843a36eb1309ce8a93ac135f0bdfd9f63cdb121adc15f398b","observation_id":"636e6cf6-3271-4678-bc38-5262a249ced2","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Raglog: Log anomaly detection using retrieval augmented generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:f858b91ec91ec454320289acf0973cb6857441e0cd6e1f00332bad25678de9f6","observation_id":"b7d344e6-942c-4d59-ae82-a46659addacf","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"A survey on hallucination in large language models: Principles, taxonomy, challenges, and open questions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:dd3b6f80c72a0655cf4479b6c987fef4e2591288468e15e45ef63917d23934e3","observation_id":"4a444149-5711-4705-8058-25c6becbc257","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Analyzing web traffic ecml/pkdd 2007 discovery challange,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:2efc4b9e2eba0a0dc67992ac439ca2c475894772bcc09b5abfe45a8fc80d03fc","observation_id":"dbb60ac8-3169-443f-b4f5-e380806a64ea","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"The freebsd project: A replication case study of open source development,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:00f1cf558e31c94761ba5cd660d311e46c083f9f2caddec9dabb48fdd27a152c","observation_id":"8ec615be-0cbf-482b-857e-b2be8b35f961","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Kenler and F","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:5228578ea542d206a35115eaa65979cf3387aa5a2a25e1796ba0be795665f42b","observation_id":"a00a19a2-d605-400a-a9f6-f2279dff50de","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Postgresql,","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:c0db587c5ef0b4b5a590e533383215550bb761160356b271f1c1b6ff5cf78e8c","observation_id":"252bfffe-82f2-4fd0-a742-9d0a6287e35c","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Carlson,Redis in action","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:8aec5c4b142262529f1bd893b1300de79279a581867cd4c91893958b97db5407","observation_id":"91ae7e96-edd9-43a8-97e8-dc34c37a6d85","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Commix: automating evaluation and exploitation of command injection vulnerabilities in web applications,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:88ee780e655d399889ebfd09c7dbb3a62a01f57f3fbbef251e4089051efec76d","observation_id":"3875a7be-fde4-48a9-9b03-b8e6a91c06f6","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-27T18:01:40.448082Z","title":"Http extensions for distributed authoring–webdav,","venue":null,"work_id":null,"year":1999},"citing_paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-27T18:01:40.448082Z"},"links":{"citing_paper":"/paper/2606.08649"},"observation_digest":"sha256:752a4b2abd7584a1367c39c4b47cddb62caf8cf21cce3f7051c6544217da6deb","observation_id":"fc4c3e29-98d0-4542-9542-712478e7df05","resolution":{"observed_at":"2026-06-27T18:01:40.448082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.08649","last_updated":"2026-06-07T14:28:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:09:44.816579Z","submitted_at":"2026-06-07T14:28:11Z","title":"Sample-Efficient LLM-Based Detection of Malicious Web Server Logs with Forensically Explainable Reasoning"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":45,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2606.08649."}