{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T15:35:24Z","timestamp":1759332924795},"reference-count":17,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,10,22]],"date-time":"2022-10-22T00:00:00Z","timestamp":1666396800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,10,22]],"date-time":"2022-10-22T00:00:00Z","timestamp":1666396800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,10,22]]},"DOI":"10.1109\/niles56402.2022.9942377","type":"proceedings-article","created":{"date-parts":[[2022,11,14]],"date-time":"2022-11-14T22:01:26Z","timestamp":1668463286000},"page":"306-310","source":"Crossref","is-referenced-by-count":3,"title":["Detecting Mimikatz in Lateral Movements Using Windows API Call Sequence Analysis"],"prefix":"10.1109","author":[{"given":"Nader","family":"Elgohary","sequence":"first","affiliation":[{"name":"School of ITCS, Nile University,Cairo,Egypt"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nashwa","family":"Abdelbaki","sequence":"additional","affiliation":[{"name":"School of ITCS, Nile University,Cairo,Egypt"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44885-4_5"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.26483\/ijarcs.v11i1.6502"},{"journal-title":"Anomaly-based detection of lateral movement in a Microsoft Windows environment","year":"2019","author":"meijerink","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-018-0475-8"},{"journal-title":"Lateral Movement Detection Using ELK Stack","year":"2018","author":"jain","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCES51560.2020.9334643"},{"key":"ref16","first-page":"465","article-title":"Reducing the Time to Detect Cyber Attacks: Combining Attack Simulation With Detection Logic","author":"myllyla","year":"2021","journal-title":"A C -P of C of O Innovations and undefined 2021"},{"journal-title":"Use of Sysmon tool to detect lateral movement attacks","year":"2022","author":"smiliotopoulos","key":"ref17"},{"journal-title":"Using Mimikatz'driver Mimidrv to disable Windows Defender in Windows","year":"2020","author":"blaauwendraad","key":"ref4"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3375708.3380314"},{"journal-title":"J E -C F & Security and undefined 2019","article-title":"Understanding the credential theft lifecycle","year":"0","key":"ref6"},{"key":"ref5","first-page":"609","author":"hart","year":"2010","journal-title":"Windows System Programming"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACOSIS.2016.7843932"},{"journal-title":"J E -C F & Security and undefined 2019","article-title":"Understanding the credential theft lifecycle","year":"2022","key":"ref7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-16-6605-6_37"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-022-03057-y"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.13140\/RG.2.2.31300.65927"}],"event":{"name":"2022 4th Novel Intelligent and Leading Emerging Sciences Conference (NILES)","start":{"date-parts":[[2022,10,22]]},"location":"Giza, Egypt","end":{"date-parts":[[2022,10,24]]}},"container-title":["2022 4th Novel Intelligent and Leading Emerging Sciences Conference (NILES)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9942273\/9942362\/09942377.pdf?arnumber=9942377","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:55:45Z","timestamp":1670874945000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9942377\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,22]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/niles56402.2022.9942377","relation":{},"subject":[],"published":{"date-parts":[[2022,10,22]]}}}