{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:MBPGLBJW5VG7I4GAQGA3AR2OBF","short_pith_number":"pith:MBPGLBJW","schema_version":"1.0","canonical_sha256":"605e658536ed4df470c08181b0474e0951db9b8f78b865c2281ca99bf4501ecf","source":{"kind":"arxiv","id":"2211.13345","version":3},"attestation_state":"computed","paper":{"title":"Principled Data-Driven Decision Support for Cyber-Forensic Investigations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Aron Laszka, Emmanouil Panaousis, Sakshyam Panda, Soodeh Atefi","submitted_at":"2022-11-23T23:18:56Z","abstract_excerpt":"In the wake of a cybersecurity incident, it is crucial to promptly discover how the threat actors breached security in order to assess the impact of the incident and to develop and deploy countermeasures that can protect against further attacks. To this end, defenders can launch a cyber-forensic investigation, which discovers the techniques that the threat actors used in the incident. A fundamental challenge in such an investigation is prioritizing the investigation of particular techniques since the investigation of each technique requires time and effort, but forensic analysts cannot know wh"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2211.13345","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-11-23T23:18:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fd5f1f66e61b1e93cef549dd3c3e871943f64b91529b96d42a240a7a703ff221","abstract_canon_sha256":"8759663be0837808fb6eafcf06d51aab76b3cda75b2726c8ca13a18e68071591"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:48:03.709410Z","signature_b64":"mf1SlRg+wRfUxjePH/CDGCfinoRaR6CTa1XsoGlsDv3c+pjRHszdv2Pac5RVB9S+PAvy9PV4APxKiFJZfMtUDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"605e658536ed4df470c08181b0474e0951db9b8f78b865c2281ca99bf4501ecf","last_reissued_at":"2026-07-05T05:48:03.708957Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:48:03.708957Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Principled Data-Driven Decision Support for Cyber-Forensic Investigations","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Aron Laszka, Emmanouil Panaousis, Sakshyam Panda, Soodeh Atefi","submitted_at":"2022-11-23T23:18:56Z","abstract_excerpt":"In the wake of a cybersecurity incident, it is crucial to promptly discover how the threat actors breached security in order to assess the impact of the incident and to develop and deploy countermeasures that can protect against further attacks. To this end, defenders can launch a cyber-forensic investigation, which discovers the techniques that the threat actors used in the incident. A fundamental challenge in such an investigation is prioritizing the investigation of particular techniques since the investigation of each technique requires time and effort, but forensic analysts cannot know wh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.13345","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.13345/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2211.13345","created_at":"2026-07-05T05:48:03.709018+00:00"},{"alias_kind":"arxiv_version","alias_value":"2211.13345v3","created_at":"2026-07-05T05:48:03.709018+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.13345","created_at":"2026-07-05T05:48:03.709018+00:00"},{"alias_kind":"pith_short_12","alias_value":"MBPGLBJW5VG7","created_at":"2026-07-05T05:48:03.709018+00:00"},{"alias_kind":"pith_short_16","alias_value":"MBPGLBJW5VG7I4GA","created_at":"2026-07-05T05:48:03.709018+00:00"},{"alias_kind":"pith_short_8","alias_value":"MBPGLBJW","created_at":"2026-07-05T05:48:03.709018+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF","json":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF.json","graph_json":"https://pith.science/api/pith-number/MBPGLBJW5VG7I4GAQGA3AR2OBF/graph.json","events_json":"https://pith.science/api/pith-number/MBPGLBJW5VG7I4GAQGA3AR2OBF/events.json","paper":"https://pith.science/paper/MBPGLBJW"},"agent_actions":{"view_html":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF","download_json":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF.json","view_paper":"https://pith.science/paper/MBPGLBJW","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2211.13345&json=true","fetch_graph":"https://pith.science/api/pith-number/MBPGLBJW5VG7I4GAQGA3AR2OBF/graph.json","fetch_events":"https://pith.science/api/pith-number/MBPGLBJW5VG7I4GAQGA3AR2OBF/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF/action/timestamp_anchor","attest_storage":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF/action/storage_attestation","attest_author":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF/action/author_attestation","sign_citation":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF/action/citation_signature","submit_replication":"https://pith.science/pith/MBPGLBJW5VG7I4GAQGA3AR2OBF/action/replication_record"}},"created_at":"2026-07-05T05:48:03.709018+00:00","updated_at":"2026-07-05T05:48:03.709018+00:00"}