TPPR: APT Tactic / Technique Pattern Guided Attack Path Reasoning for Attack Investigation

Qi Sheng

Provenance analysis based on system audit data has emerged as a fundamental approach for investigating Advanced Persistent Threat (APT) attacks. Due to the high concealment and lon…