ActMiner: Applying Causality Tracking and Increment Aligning for Graph-based Cyber Threat Hunting

Mingjun Ma, Tiantian Zhu, Shuang Li +4

To defend against Advanced Persistent Threats on the endpoint, threat hunting employs security knowledge such as cyber threat intelligence to continuously analyze system audit logs…