{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:W2SQEC3H5VR6I7OHFG3NOSJXCQ","short_pith_number":"pith:W2SQEC3H","canonical_record":{"source":{"id":"2403.03267","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-05T19:04:09Z","cross_cats_sorted":[],"title_canon_sha256":"1388c18630371381057a54f9f5117cc2f21cecec5543a1ede75f325c0d6b8569","abstract_canon_sha256":"e4e4cf7c860f696b5ec3609e67f904effba0075bf5de5e9ea1835c4b654c3c35"},"schema_version":"1.0"},"canonical_sha256":"b6a5020b67ed63e47dc729b6d7493714035b8dd4bc5e6a495d06c12a1f98a30e","source":{"kind":"arxiv","id":"2403.03267","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03267","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03267v3","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03267","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_12","alias_value":"W2SQEC3H5VR6","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_16","alias_value":"W2SQEC3H5VR6I7OH","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_8","alias_value":"W2SQEC3H","created_at":"2026-07-05T09:09:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:W2SQEC3H5VR6I7OHFG3NOSJXCQ","target":"record","payload":{"canonical_record":{"source":{"id":"2403.03267","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-05T19:04:09Z","cross_cats_sorted":[],"title_canon_sha256":"1388c18630371381057a54f9f5117cc2f21cecec5543a1ede75f325c0d6b8569","abstract_canon_sha256":"e4e4cf7c860f696b5ec3609e67f904effba0075bf5de5e9ea1835c4b654c3c35"},"schema_version":"1.0"},"canonical_sha256":"b6a5020b67ed63e47dc729b6d7493714035b8dd4bc5e6a495d06c12a1f98a30e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:09:56.785260Z","signature_b64":"I7wfUaLJUhwIBaQeeKU7eQ7FPkbdTbtrReYmOlwkg5d6txbkmeGzMOS2gONgaCYNDv6kTHvHcmjc27OW++bqDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6a5020b67ed63e47dc729b6d7493714035b8dd4bc5e6a495d06c12a1f98a30e","last_reissued_at":"2026-07-05T09:09:56.784791Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:09:56.784791Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.03267","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:09:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Go7Prp1L9YS7MOIdKz0qTEe8dxZqNJnQ7avLebC2tR9fKBPutW818i0OlkOJHHJyvYK0N8a014vaJe/uLjdrCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:43:17.273027Z"},"content_sha256":"433153b4115b7108ad9d9c8ccdb2e91303acf08f1145c692325a6c8a4247715e","schema_version":"1.0","event_id":"sha256:433153b4115b7108ad9d9c8ccdb2e91303acf08f1145c692325a6c8a4247715e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:W2SQEC3H5VR6I7OHFG3NOSJXCQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bikash Saha, Nanda Rani, Sandeep Kumar Shukla, Vikas Maurya","submitted_at":"2024-03-05T19:04:09Z","abstract_excerpt":"Understanding the modus operandi of adversaries aids organizations in employing efficient defensive strategies and sharing intelligence in the community. This knowledge is often present in unstructured natural language text within threat analysis reports. A translation tool is needed to interpret the modus operandi explained in the sentences of the threat report and translate it into a structured format. This research introduces a methodology named TTPXHunter for the automated extraction of threat intelligence in terms of Tactics, Techniques, and Procedures (TTPs) from finished cyber threat re"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03267","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.03267/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:09:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0GW5A1JlrDe33+1448hXI/hraPU5JKQgW8cMbGBxp4qU8HO3HBz/7Owboqnn4dTKOaOG7JGX1mxsCIXeAcznDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:43:17.274009Z"},"content_sha256":"453658d01f78a869d43d1a87d64ec8c9758b43bf87e606966c2f0130d305f050","schema_version":"1.0","event_id":"sha256:453658d01f78a869d43d1a87d64ec8c9758b43bf87e606966c2f0130d305f050"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/bundle.json","state_url":"https://pith.science/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:43:17Z","links":{"resolver":"https://pith.science/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ","bundle":"https://pith.science/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/bundle.json","state":"https://pith.science/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W2SQEC3H5VR6I7OHFG3NOSJXCQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:W2SQEC3H5VR6I7OHFG3NOSJXCQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4e4cf7c860f696b5ec3609e67f904effba0075bf5de5e9ea1835c4b654c3c35","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-05T19:04:09Z","title_canon_sha256":"1388c18630371381057a54f9f5117cc2f21cecec5543a1ede75f325c0d6b8569"},"schema_version":"1.0","source":{"id":"2403.03267","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03267","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03267v3","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03267","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_12","alias_value":"W2SQEC3H5VR6","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_16","alias_value":"W2SQEC3H5VR6I7OH","created_at":"2026-07-05T09:09:56Z"},{"alias_kind":"pith_short_8","alias_value":"W2SQEC3H","created_at":"2026-07-05T09:09:56Z"}],"graph_snapshots":[{"event_id":"sha256:453658d01f78a869d43d1a87d64ec8c9758b43bf87e606966c2f0130d305f050","target":"graph","created_at":"2026-07-05T09:09:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.03267/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Understanding the modus operandi of adversaries aids organizations in employing efficient defensive strategies and sharing intelligence in the community. This knowledge is often present in unstructured natural language text within threat analysis reports. A translation tool is needed to interpret the modus operandi explained in the sentences of the threat report and translate it into a structured format. This research introduces a methodology named TTPXHunter for the automated extraction of threat intelligence in terms of Tactics, Techniques, and Procedures (TTPs) from finished cyber threat re","authors_text":"Bikash Saha, Nanda Rani, Sandeep Kumar Shukla, Vikas Maurya","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-05T19:04:09Z","title":"TTPXHunter: Actionable Threat Intelligence Extraction as TTPs from Finished Cyber Threat Reports"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03267","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:433153b4115b7108ad9d9c8ccdb2e91303acf08f1145c692325a6c8a4247715e","target":"record","created_at":"2026-07-05T09:09:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4e4cf7c860f696b5ec3609e67f904effba0075bf5de5e9ea1835c4b654c3c35","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-05T19:04:09Z","title_canon_sha256":"1388c18630371381057a54f9f5117cc2f21cecec5543a1ede75f325c0d6b8569"},"schema_version":"1.0","source":{"id":"2403.03267","kind":"arxiv","version":3}},"canonical_sha256":"b6a5020b67ed63e47dc729b6d7493714035b8dd4bc5e6a495d06c12a1f98a30e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6a5020b67ed63e47dc729b6d7493714035b8dd4bc5e6a495d06c12a1f98a30e","first_computed_at":"2026-07-05T09:09:56.784791Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:09:56.784791Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"I7wfUaLJUhwIBaQeeKU7eQ7FPkbdTbtrReYmOlwkg5d6txbkmeGzMOS2gONgaCYNDv6kTHvHcmjc27OW++bqDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:09:56.785260Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.03267","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:433153b4115b7108ad9d9c8ccdb2e91303acf08f1145c692325a6c8a4247715e","sha256:453658d01f78a869d43d1a87d64ec8c9758b43bf87e606966c2f0130d305f050"],"state_sha256":"1d204e3c39bde372e4481de93500b5d0ba299f139241eb85c08d55e3db5d0119"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/xvRLEQtyLf9IAcN2R6de6GLPA5A4PPVGotBBI/9gQn2VogtAZN+oQDKHaf+tlTwqgZQ/nnOux0rgB9LGhstAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:43:17.279030Z","bundle_sha256":"b52be1c3d3d1f0e56341e46000bf6e5cfdfac5bc8a158a124dd771e8b3764464"}}