{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:6JR2MF6LXUTBO5CUSI42RSNZRN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"50880c89bc92ee86cad2430f2cd9e2908a24bd91f2aa03c410824137f7b97858","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.AP","submitted_at":"2018-11-01T19:00:29Z","title_canon_sha256":"46608b2057f4a65f938626d829543c6247bbbea18f626469dcb6fec1cf745dca"},"schema_version":"1.0","source":{"id":"1811.00591","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.00591","created_at":"2026-05-18T00:01:42Z"},{"alias_kind":"arxiv_version","alias_value":"1811.00591v1","created_at":"2026-05-18T00:01:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.00591","created_at":"2026-05-18T00:01:42Z"},{"alias_kind":"pith_short_12","alias_value":"6JR2MF6LXUTB","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_16","alias_value":"6JR2MF6LXUTBO5CU","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_8","alias_value":"6JR2MF6L","created_at":"2026-05-18T12:32:08Z"}],"graph_snapshots":[{"event_id":"sha256:d0e34311a37d7cd0fe2220b26a9385953638525922591791ce4a47d10428dadc","target":"graph","created_at":"2026-05-18T00:01:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Host logs, in particular, Windows Event Logs, are a valuable source of information often collected by security operation centers (SOCs). The semi-structured nature of host logs inhibits automated analytics, and while manual analysis is common, the sheer volume makes manual inspection of all logs impossible. Although many powerful algorithms for analyzing time-series and sequential data exist, utilization of such algorithms for most cyber security applications is either infeasible or requires tailored, research-intensive preparations. In particular, basic mathematic and algorithmic developments","authors_text":"Miki E. Verma, Robert A. Bridges","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.AP","submitted_at":"2018-11-01T19:00:29Z","title":"Defining a Metric Space of Host Logs and Operational Use Cases"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.00591","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9a2f57336a8a645666599c694789390f2b7e77c054d26d3941e6a4d21ac8d7de","target":"record","created_at":"2026-05-18T00:01:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"50880c89bc92ee86cad2430f2cd9e2908a24bd91f2aa03c410824137f7b97858","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.AP","submitted_at":"2018-11-01T19:00:29Z","title_canon_sha256":"46608b2057f4a65f938626d829543c6247bbbea18f626469dcb6fec1cf745dca"},"schema_version":"1.0","source":{"id":"1811.00591","kind":"arxiv","version":1}},"canonical_sha256":"f263a617cbbd261774549239a8c9b98b49a7a8cc54052cff84496fb19cc0316f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f263a617cbbd261774549239a8c9b98b49a7a8cc54052cff84496fb19cc0316f","first_computed_at":"2026-05-18T00:01:42.786152Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:01:42.786152Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"viisCFTg/btkQxsSIIaJoDuei5PMDyMYszDpDjrF65o2FHDho6cN3pDeZEk/ELPV/BI/YJif4AQsbGB+jJLuBw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:01:42.786765Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.00591","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9a2f57336a8a645666599c694789390f2b7e77c054d26d3941e6a4d21ac8d7de","sha256:d0e34311a37d7cd0fe2220b26a9385953638525922591791ce4a47d10428dadc"],"state_sha256":"7cb3e37e6713530e22debd03b3421b2cb28152e3a5ca95eaee0c47d4cc8d6127"}