USENIX Security '18 - SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior...
▶USENIX Security '18 - SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior... — a USENIX security conference talk on dfir, threat-hunting (25:44 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube