ORCHID: Streaming Threat Detection over Versioned Provenance Graphs

Akul Goyal, Jason Liu, Adam Bates +1

While Endpoint Detection and Response (EDR) are able to efficiently monitor threats by comparing static rules to the event stream, their inability to incorporate past system contex…