{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T18:08:38Z","timestamp":1777486118077,"version":"3.51.4"},"reference-count":15,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,9,1]],"date-time":"2025-09-01T00:00:00Z","timestamp":1756684800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Secur. Privacy"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1109\/msec.2024.3492132","type":"journal-article","created":{"date-parts":[[2024,12,30]],"date-time":"2024-12-30T14:45:48Z","timestamp":1735569948000},"page":"56-67","source":"Crossref","is-referenced-by-count":3,"title":["ThreatScout: Automated Threat Hunting Solution Using Machine Reasoning"],"prefix":"10.1109","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4791-1664","authenticated-orcid":false,"given":"Zineb Meriem","family":"Ferdjouni","sequence":"first","affiliation":[{"name":"Concordia University, Montréal, QC, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5609-856X","authenticated-orcid":false,"given":"Boubakr","family":"Nour","sequence":"additional","affiliation":[{"name":"Ericsson Security Research, Montréal, QC, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9775-6231","authenticated-orcid":false,"given":"Makan","family":"Pourzandi","sequence":"additional","affiliation":[{"name":"Ericsson Security Research, Montréal, QC, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3015-3043","authenticated-orcid":false,"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[{"name":"Concordia University, Montréal, QC, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Cost of a Data Breach Report 2022","year":"2022","journal-title":"IBM Security, Tech. Rep."},{"key":"ref2","volume-title":"LightBasin: A roaming threat to telecommunications companies","year":"2024"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2023.3299519"},{"key":"ref4","first-page":"3005","article-title":"ATLAS: A sequence-based learning approach for attack investigation","volume-title":"Proc. 32nd USENIX Security Symp.","author":"Alsaheel","year":"2021"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3491260"},{"key":"ref6","article-title":"Automating cyber threat hunting using NLP, automated query generation, and genetic perturbation","author":"Karuna","year":"2021"},{"key":"ref7","first-page":"373","article-title":"AIRTAG: Towards automated attack investigation by unsupervised learning with log texts","volume-title":"Proc. 32nd USENIX Security Symp.","author":"Ding","year":"2023"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2022.3233703"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/tnsm.2024.3378972"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3523261"},{"key":"ref11","first-page":"1","article-title":"Evidential cyber threat hunting","volume-title":"Proc. AI\/ML Cybersecurity Workshop","author":"Araujo","year":"2021"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.02.005"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/csr51186.2021.9527936"},{"key":"ref14","volume-title":"Production Matching for Large Learning Systems","author":"Doorenbos","year":"1995"},{"key":"ref15","volume-title":"MITRE ATT&CK framework","year":"2024"}],"container-title":["IEEE Security & Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8013\/11204761\/10817780.pdf?arnumber=10817780","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,16]],"date-time":"2025-10-16T17:40:38Z","timestamp":1760636438000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10817780\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9]]},"references-count":15,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/msec.2024.3492132","relation":{},"ISSN":["1540-7993","1558-4046"],"issn-type":[{"value":"1540-7993","type":"print"},{"value":"1558-4046","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9]]}}}