{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:4FU7PMUW2PB3ZHCBM2MJQ5ZWED","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"235210183a83d3821ff3371eda6eaa0bb60d892901798451caafd5294592fe99","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T08:37:06Z","title_canon_sha256":"2f324c0fc2374c07ce29d75c5db17da9c9a88da8cf6b59949cb7918026cd4c55"},"schema_version":"1.0","source":{"id":"2605.20896","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.20896","created_at":"2026-05-21T01:05:26Z"},{"alias_kind":"arxiv_version","alias_value":"2605.20896v1","created_at":"2026-05-21T01:05:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.20896","created_at":"2026-05-21T01:05:26Z"},{"alias_kind":"pith_short_12","alias_value":"4FU7PMUW2PB3","created_at":"2026-05-21T01:05:26Z"},{"alias_kind":"pith_short_16","alias_value":"4FU7PMUW2PB3ZHCB","created_at":"2026-05-21T01:05:26Z"},{"alias_kind":"pith_short_8","alias_value":"4FU7PMUW","created_at":"2026-05-21T01:05:26Z"}],"graph_snapshots":[{"event_id":"sha256:f3757f6341ed46a22cf0d93503c68d25c43ac867cd72979514fa6bd844b4c118","target":"graph","created_at":"2026-05-21T01:05:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.20896/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Defending against today's increasingly sophisticated cyberattacks requires security analysts to continuously translate evolving attacker tradecraft into detection logic. This places defenders in a reactive posture, requiring constantly updated expertise across an increasingly fragmented security landscape. We introduce the Dynamic Threat Detection Agent (DTDA), an always-on adaptive agent that continuously investigates security incidents across Microsoft Defender to uncover hidden threats and generate explainable detections when attack-story gaps are found. DTDA combines: (1) a unified activit","authors_text":"Amir Gharib, Scott Freitas","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T08:37:06Z","title":"GenAI-Driven Threat Detection with Microsoft Security Copilot"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.20896","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ab42b76c7f04bbe3e96bafa5fb274548e9348faf91306e9a98d95f5ea4df68a","target":"record","created_at":"2026-05-21T01:05:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"235210183a83d3821ff3371eda6eaa0bb60d892901798451caafd5294592fe99","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-20T08:37:06Z","title_canon_sha256":"2f324c0fc2374c07ce29d75c5db17da9c9a88da8cf6b59949cb7918026cd4c55"},"schema_version":"1.0","source":{"id":"2605.20896","kind":"arxiv","version":1}},"canonical_sha256":"e169f7b296d3c3bc9c41669898773620fcdb7238fffb35fc936f3876959b8ca2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e169f7b296d3c3bc9c41669898773620fcdb7238fffb35fc936f3876959b8ca2","first_computed_at":"2026-05-21T01:05:26.888104Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-21T01:05:26.888104Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rXHNMFWHa1xSdheyElYGMyFEdHfW8iAtgFCa+a7a77YIOh5OLM988MaZ7WRAcmds5RMaIwE7dEv0U99pExevBQ==","signature_status":"signed_v1","signed_at":"2026-05-21T01:05:26.888900Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.20896","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ab42b76c7f04bbe3e96bafa5fb274548e9348faf91306e9a98d95f5ea4df68a","sha256:f3757f6341ed46a22cf0d93503c68d25c43ac867cd72979514fa6bd844b4c118"],"state_sha256":"d2f4c55eb3ab8ab90708f62bd9580ed116bf0f94b2eddab6f7f577dcc363cbb1"}