USENIX Security '17 - SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data
▶USENIX Security '17 - SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data — a USENIX security conference talk on dfir, threat-hunting (27:38 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube