collaborators

1 paper

cs.CR2026

DEFENDCLI: {Command-Line} Driven Attack Provenance Examination

Peilun Wu, Nan Sun, Nour Moustafa +2

Endpoint Detection and Response (EDR) solutions embrace the method of attack provenance graph to discover unknown threats through system event correlation. However, this method sti…