AutoCRAT: Automatic Cumulative Reconstruction of Alert Trees

Eric Ficke, Raymond M. Bateman, Shouhuai Xu

When a network is attacked, cyber defenders need to precisely identify which systems (i.e., computers or devices) were compromised and what damage may have been inflicted. This pro…