{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T07:57:15Z","timestamp":1768031835419,"version":"3.49.0"},"reference-count":21,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,12,15]],"date-time":"2023-12-15T00:00:00Z","timestamp":1702598400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,12,15]],"date-time":"2023-12-15T00:00:00Z","timestamp":1702598400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,12,15]]},"DOI":"10.1109\/bigdata59044.2023.10386677","type":"proceedings-article","created":{"date-parts":[[2024,1,22]],"date-time":"2024-01-22T18:28:47Z","timestamp":1705948127000},"page":"3035-3042","source":"Crossref","is-referenced-by-count":1,"title":["Enhancing Cyber Threat Hunting: A Visual Approach with the Forensic Visualization Toolkit"],"prefix":"10.1109","author":[{"given":"Jihane","family":"Najar","sequence":"first","affiliation":[{"name":"AEGIS IT RESEARCH GmbH,Braunschweig,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marinos","family":"Tsantekidis","sequence":"additional","affiliation":[{"name":"AEGIS IT RESEARCH GmbH,Braunschweig,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aris","family":"Sotiropoulos","sequence":"additional","affiliation":[{"name":"AEGIS IT RESEARCH GmbH,Braunschweig,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vassilis","family":"Prevelakis","sequence":"additional","affiliation":[{"name":"TU Braunschweig,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37583-5"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1111\/cgf.13324"},{"issue":"3","key":"ref3","first-page":"15","article-title":"Visual analytics for intrusion detection: Benefits and challenges","volume":"8","author":"Chae","year":"2017","journal-title":"ACM Transactions on Management Information Systems (TMIS)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2923736"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30275-7_20"},{"key":"ref6","article-title":"Fireeye","year":"2023"},{"key":"ref7","volume-title":"Apache kafka","author":"Garg","year":"2013"},{"key":"ref8","volume-title":"Elasticsearch: the definitive guide: a distributed real-time search and analytics engine","author":"Gormley","year":"2015"},{"key":"ref9","article-title":"GRR team: Grr rapid response","year":"2023"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3390\/math8030460"},{"key":"ref11","article-title":"JPCERT Coordination Center: Malconfscan","year":"2023"},{"key":"ref12","article-title":"Martin Korman: Volatilitybot","year":"2023"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISRCS.2014.6900103"},{"key":"ref14","article-title":"Introduction to stix","author":"Open","year":"2023"},{"key":"ref15","article-title":"Plotly: Plotly, automatically grab data from an image with webplotdigitizer","year":"2023"},{"key":"ref16","article-title":"Redline: Redline","year":"2023"},{"key":"ref17","article-title":"Rekall Forensics: Rekall","year":"2023"},{"key":"ref18","article-title":"Splunk Inc.: Splunk","year":"2023"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.58679\/it41294"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1175\/1520-0477-45.12.758"},{"key":"ref21","article-title":"Volatility Foundation: Volatility","year":"2023"}],"event":{"name":"2023 IEEE International Conference on Big Data (BigData)","location":"Sorrento, Italy","start":{"date-parts":[[2023,12,15]]},"end":{"date-parts":[[2023,12,18]]}},"container-title":["2023 IEEE International Conference on Big Data (BigData)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10385234\/10386078\/10386677.pdf?arnumber=10386677","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T02:29:33Z","timestamp":1706754573000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10386677\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,15]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/bigdata59044.2023.10386677","relation":{},"subject":[],"published":{"date-parts":[[2023,12,15]]}}}