research
∙
09/30/2019
POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting
Cyber threat intelligence (CTI) is being used to search for indicators o...
share
research
∙
10/12/2018
ProPatrol: Attack Investigation via Extracted High-Level Tasks
Kernel audit logs are an invaluable source of information in the forensi...
research
∙
10/03/2018
HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows
This version withdrawn by arXiv administrators because the author did no...
research
∙
01/06/2018