Defining a Metric Space of Host Logs and Operational Use Cases

Host logs, in particular, Windows Event Logs, are a valuable source of information often collected by security operation centers (SOCs). The semi-structured nature of host logs inhibits automated analytics, and while manual analysis is common, the sheer volume makes manual inspection of all logs imp...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	arXiv.org 2018-11
Hauptverfasser:	Verma, Miki E, Bridges, Robert A
Format:	Artikel
Sprache:	eng
Schlagworte:	Algorithms Analytics Clustering Cybersecurity Data mining Embedding Inspection Machine learning Metric space Sequences Similarity Streams Time series
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!