{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T17:14:11Z","timestamp":1785518051326,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,5,30]],"date-time":"2022-05-30T00:00:00Z","timestamp":1653868800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["1618706, 1717774, and 2127207"],"award-info":[{"award-number":["1618706, 1717774, and 2127207"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"DARPA","award":["N66001-18-C-4033"],"award-info":[{"award-number":["N66001-18-C-4033"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,5,30]]},"DOI":"10.1145\/3488932.3523261","type":"proceedings-article","created":{"date-parts":[[2022,5,24]],"date-time":"2022-05-24T04:23:26Z","timestamp":1653366206000},"page":"97-108","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":24,"title":["SteinerLog"],"prefix":"10.1145","author":[{"given":"Bibek","family":"Bhattarai","sequence":"first","affiliation":[{"name":"George Washington University, Washington, DC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Howie","family":"Huang","sequence":"additional","affiliation":[{"name":"George Washington University, Washington, DC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,5,30]]},"reference":[{"key":"e_1_3_2_2_1_1","doi-asserted-by":"crossref","unstructured":"A. Alshamrani S. Myneni A. Chowdhary and D. Huang. 2019. A Survey on Advanced Persistent Threats: Techniques Solutions Challenges and Research Opportunities. IEEE Communications Surveys Tutorials (2019).  A. Alshamrani S. Myneni A. Chowdhary and D. Huang. 2019. A Survey on Advanced Persistent Threats: Techniques Solutions Challenges and Research Opportunities. IEEE Communications Surveys Tutorials (2019).","DOI":"10.1109\/COMST.2019.2891891"},{"key":"e_1_3_2_2_2_1","volume-title":"Analyzing the Usefulness of the DARPA OpTC Dataset in Cyber Threat Detection Research. CoRR","author":"Monowar Anjum Md.","year":"2021","unstructured":"Md. Monowar Anjum , Shahrear Iqbal , and Benoit Hamelin . 2021. Analyzing the Usefulness of the DARPA OpTC Dataset in Cyber Threat Detection Research. CoRR , Vol. abs\/ 2103 .03080 ( 2021 ). showeprint[arXiv]2103.03080 https:\/\/arxiv.org\/abs\/2103.03080 Md. Monowar Anjum, Shahrear Iqbal, and Benoit Hamelin. 2021. Analyzing the Usefulness of the DARPA OpTC Dataset in Cyber Threat Detection Research. CoRR, Vol. abs\/2103.03080 (2021). showeprint[arXiv]2103.03080 https:\/\/arxiv.org\/abs\/2103.03080"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5724"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382284"},{"key":"e_1_3_2_2_5_1","volume-title":"2022 a. ATT&CK Matrix for Enterprise. https:\/\/attack.mitre.org\/ Retrieved","author":"The Mitre Corporation","year":"2022","unstructured":"The Mitre Corporation . 2022 a. ATT&CK Matrix for Enterprise. https:\/\/attack.mitre.org\/ Retrieved March 6, 2022 from The Mitre Corporation. 2022 a. ATT&CK Matrix for Enterprise. https:\/\/attack.mitre.org\/ Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_6_1","volume-title":"2022 b. MITRE Cyber Analytics Repository. https:\/\/car.mitre.org\/ Retrieved","author":"The Mitre Corporation","year":"2022","unstructured":"The Mitre Corporation . 2022 b. MITRE Cyber Analytics Repository. https:\/\/car.mitre.org\/ Retrieved March 6, 2022 from The Mitre Corporation. 2022 b. MITRE Cyber Analytics Repository. https:\/\/car.mitre.org\/ Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_7_1","volume-title":"Rules for Elastic Security's detection engine. https:\/\/github.com\/elastic\/detection-rules.git Retrieved","year":"2022","unstructured":"Elastic. 2022. Rules for Elastic Security's detection engine. https:\/\/github.com\/elastic\/detection-rules.git Retrieved March 6, 2022 from Elastic. 2022. Rules for Elastic Security's detection engine. https:\/\/github.com\/elastic\/detection-rules.git Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_8_1","volume-title":"SedanSpot: Detecting Anomalies in Edge Streams. 2018 IEEE International Conference on Data Mining (ICDM)","author":"Eswaran Dhivya","year":"2018","unstructured":"Dhivya Eswaran and Christos Faloutsos . 2018 . SedanSpot: Detecting Anomalies in Edge Streams. 2018 IEEE International Conference on Data Mining (ICDM) (2018). Dhivya Eswaran and Christos Faloutsos. 2018. SedanSpot: Detecting Anomalies in Edge Streams. 2018 IEEE International Conference on Data Mining (ICDM) (2018)."},{"key":"e_1_3_2_2_9_1","volume-title":"Special Report. https:\/\/content.fireeye.com\/m-trends\/rpt-m-trends-2020 Retrieved","year":"2022","unstructured":"Fireeye. 2020. M-TRENDS 2020- Fireeye Madiant Services , Special Report. https:\/\/content.fireeye.com\/m-trends\/rpt-m-trends-2020 Retrieved March 6, 2022 from Fireeye. 2020. M-TRENDS 2020- Fireeye Madiant Services, Special Report. https:\/\/content.fireeye.com\/m-trends\/rpt-m-trends-2020 Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_10_1","volume-title":"DTrace on FreeBSD. https:\/\/wiki.freebsd.org\/DTrace Retrieved","author":"BSD.","year":"2022","unstructured":"Free BSD. 2018. DTrace on FreeBSD. https:\/\/wiki.freebsd.org\/DTrace Retrieved March 6, 2022 from FreeBSD. 2018. DTrace on FreeBSD. https:\/\/wiki.freebsd.org\/DTrace Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_11_1","unstructured":"Josh Fruhlinger. 2020. The OPM hack explained: Bad security practices meet China's Captain America. https:\/\/www.csoonline.com\/article\/3318238\/the-opm-hack-explained-bad-security-practices-meet-chinas-captain-america.html Retrieved March 6 2022 from  Josh Fruhlinger. 2020. The OPM hack explained: Bad security practices meet China's Captain America. https:\/\/www.csoonline.com\/article\/3318238\/the-opm-hack-explained-bad-security-practices-meet-chinas-captain-america.html Retrieved March 6 2022 from"},{"key":"e_1_3_2_2_12_1","volume-title":"Sanjeev R Kulkarni, and Prateek Mittal.","author":"Gao Peng","year":"2018","unstructured":"Peng Gao , Xusheng Xiao , Ding Li , Zhichun Li , Kangkook Jee , Zhenyu Wu , Chung Hwan Kim , Sanjeev R Kulkarni, and Prateek Mittal. 2018 a. {SAQL}: A Stream-based Query System for Real-Time Abnormal System Behavior Detection. In 27th {USENIX} Security Symposium ({USENIX} Security 18). Peng Gao, Xusheng Xiao, Ding Li, Zhichun Li, Kangkook Jee, Zhenyu Wu, Chung Hwan Kim, Sanjeev R Kulkarni, and Prateek Mittal. 2018a. {SAQL}: A Stream-based Query System for Real-Time Abnormal System Behavior Detection. In 27th {USENIX} Security Symposium ({USENIX} Security 18)."},{"key":"e_1_3_2_2_13_1","unstructured":"Peng Gao Xusheng Xiao Zhichun Li Fengyuan Xu Sanjeev R Kulkarni and Prateek Mittal. 2018b. {AIQL}: Enabling Efficient Attack Investigation from System Monitoring Data. In 2018 {USENIX} Annual Technical Conference ({USENIX}{ATC} 18).  Peng Gao Xusheng Xiao Zhichun Li Fengyuan Xu Sanjeev R Kulkarni and Prateek Mittal. 2018b. {AIQL}: Enabling Efficient Attack Investigation from System Monitoring Data. In 2018 {USENIX} Annual Technical Conference ({USENIX}{ATC} 18)."},{"key":"e_1_3_2_2_14_1","series-title":"SIAM J. Comput. (1995)","volume-title":"A general approximation technique for constrained forest problems","author":"Goemans Michel X","unstructured":"Michel X Goemans and David P Williamson . 1995. A general approximation technique for constrained forest problems . SIAM J. Comput. (1995) . Michel X Goemans and David P Williamson. 1995. A general approximation technique for constrained forest problems. SIAM J. Comput. (1995)."},{"key":"e_1_3_2_2_15_1","volume-title":"auditd - The Linux Audit daemon. https:\/\/linux.die.net\/man\/8\/auditd Retrieved","author":"Grubb Steve","year":"2022","unstructured":"Steve Grubb . 2022. auditd - The Linux Audit daemon. https:\/\/linux.die.net\/man\/8\/auditd Retrieved March 6, 2022 from Steve Grubb. 2022. auditd - The Linux Audit daemon. https:\/\/linux.die.net\/man\/8\/auditd Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_16_1","volume-title":"Unicorn: Runtime provenance-based detector for advanced persistent threats. arXiv preprint arXiv:2001.01525","author":"Han Xueyuan","year":"2020","unstructured":"Xueyuan Han , Thomas Pasquier , Adam Bates , James Mickens , and Margo Seltzer . 2020 . Unicorn: Runtime provenance-based detector for advanced persistent threats. arXiv preprint arXiv:2001.01525 (2020). Xueyuan Han, Thomas Pasquier, Adam Bates, James Mickens, and Margo Seltzer. 2020. Unicorn: Runtime provenance-based detector for advanced persistent threats. arXiv preprint arXiv:2001.01525 (2020)."},{"key":"e_1_3_2_2_17_1","volume-title":"https:\/\/github.com\/olafhartong\/ThreatHunting Retrieved","author":"Hartong Olaf","year":"2022","unstructured":"Olaf Hartong . 2022. ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts. https:\/\/github.com\/olafhartong\/ThreatHunting Retrieved March 6, 2022 from https:\/\/github.com\/olafhartong\/ThreatHunting Olaf Hartong. 2022. ThreatHunting | A Splunk app mapped to MITRE ATT&CK to guide your threat hunts. https:\/\/github.com\/olafhartong\/ThreatHunting Retrieved March 6, 2022 from https:\/\/github.com\/olafhartong\/ThreatHunting"},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23141"},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"e_1_3_2_2_21_1","volume-title":"SLEUTH: Real-time attack scenario reconstruction from COTS audit data. In 26th {USENIX} Security Symposium ({USENIX} Security 17).","author":"Hossain Md Nahid","year":"2017","unstructured":"Md Nahid Hossain , Sadegh M Milajerdi , Junao Wang , Birhanu Eshete , Rigel Gjomemo , R Sekar , Scott Stoller , and VN Venkatakrishnan . 2017 . SLEUTH: Real-time attack scenario reconstruction from COTS audit data. In 26th {USENIX} Security Symposium ({USENIX} Security 17). Md Nahid Hossain, Sadegh M Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R Sekar, Scott Stoller, and VN Venkatakrishnan. 2017. SLEUTH: Real-time attack scenario reconstruction from COTS audit data. In 26th {USENIX} Security Symposium ({USENIX} Security 17)."},{"key":"e_1_3_2_2_22_1","volume-title":"Dependence-Preserving Data Compaction for Scalable Forensic Analysis. In 27th USENIX Security Symposium (USENIX Security 18)","author":"Hossain Md Nahid","unstructured":"Md Nahid Hossain , Junao Wang , R. Sekar , and Scott D. Stoller . 2018 . Dependence-Preserving Data Compaction for Scalable Forensic Analysis. In 27th USENIX Security Symposium (USENIX Security 18) . USENIX Association. Md Nahid Hossain, Junao Wang, R. Sekar, and Scott D. Stoller. 2018. Dependence-Preserving Data Compaction for Scalable Forensic Analysis. In 27th USENIX Security Symposium (USENIX Security 18). USENIX Association."},{"key":"e_1_3_2_2_23_1","unstructured":"David S Johnson Maria Minkoff and Steven Phillips. 2000. The prize collecting steiner tree problem: theory and practice. In SODA. Citeseer.  David S Johnson Maria Minkoff and Steven Phillips. 2000. The prize collecting steiner tree problem: theory and practice. In SODA. Citeseer."},{"key":"e_1_3_2_2_24_1","volume-title":"DCtheGeek, mcleanbyron, drewbatgit, and msatranjr.","year":"2021","unstructured":"Karl-Bridge-MIcrosoft , v kents , DCtheGeek, mcleanbyron, drewbatgit, and msatranjr. 2021 . Event Tracing . https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/etw\/event-tracing-portal Karl-Bridge-MIcrosoft, v kents, DCtheGeek, mcleanbyron, drewbatgit, and msatranjr. 2021. Event Tracing. https:\/\/docs.microsoft.com\/en-us\/windows\/win32\/etw\/event-tracing-portal"},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945467"},{"key":"e_1_3_2_2_26_1","volume-title":"Dominic G Lucchetti, and Peter M Chen.","author":"King Samuel T","year":"2005","unstructured":"Samuel T King , Zhuoqing Morley Mao , Dominic G Lucchetti, and Peter M Chen. 2005 . Enriching Intrusion Alerts Through Multi-Host Causality.. In NDSS. Samuel T King, Zhuoqing Morley Mao, Dominic G Lucchetti, and Peter M Chen. 2005. Enriching Intrusion Alerts Through Multi-Host Causality.. In NDSS."},{"key":"e_1_3_2_2_27_1","unstructured":"Kyu Hyung Lee Xiangyu Zhang and Dongyan Xu. 2013. LogGC: garbage collecting audit log. In SIGSAC.  Kyu Hyung Lee Xiangyu Zhang and Dongyan Xu. 2013. LogGC: garbage collecting audit log. In SIGSAC."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23254"},{"key":"e_1_3_2_2_30_1","unstructured":"Yaping Mao. 2017. Steiner Distance in Graphs--A Survey. arxiv: 1708.05779 [math.CO]  Yaping Mao. 2017. Steiner Distance in Graphs--A Survey. arxiv: 1708.05779 [math.CO]"},{"key":"e_1_3_2_2_31_1","volume-title":"The Cyber Kill Chain. https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain. html Retrieved march 6","author":"Martin Lochheed","year":"2022","unstructured":"Lochheed Martin . 2022. The Cyber Kill Chain. https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain. html Retrieved march 6 , 2022 Lochheed Martin. 2022. The Cyber Kill Chain. https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain. html Retrieved march 6, 2022"},{"key":"e_1_3_2_2_32_1","first-page":"5M","article-title":"2012 Linkedin Breach had 117 Million Emails and Passwords Stolen","volume":"6","author":"Micro Trend","year":"2016","unstructured":"Trend Micro . 2016 . 2012 Linkedin Breach had 117 Million Emails and Passwords Stolen , Not 6 . 5M . https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cyber-attacks\/2012-linkedin-breach-117-million-emails-and-passwords-stolen-not-6-5m Retrieved March 6, 2022 from Trend Micro. 2016. 2012 Linkedin Breach had 117 Million Emails and Passwords Stolen, Not 6.5M. https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cyber-attacks\/2012-linkedin-breach-117-million-emails-and-passwords-stolen-not-6-5m Retrieved March 6, 2022 from","journal-title":"Not"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363217"},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186112"},{"key":"e_1_3_2_2_36_1","volume-title":"DCcast: Efficient Point to Multipoint Transfers across Datacenters (HotCloud'17)","author":"Noormohammadpour Mohammad","unstructured":"Mohammad Noormohammadpour , Cauligi S. Raghavendra , Sriram Rao , and Srikanth Kandula . 2017. DCcast: Efficient Point to Multipoint Transfers across Datacenters (HotCloud'17) . USENIX Association . Mohammad Noormohammadpour, Cauligi S. Raghavendra, Sriram Rao, and Srikanth Kandula. 2017. DCcast: Efficient Point to Multipoint Transfers across Datacenters (HotCloud'17). USENIX Association."},{"key":"e_1_3_2_2_37_1","volume-title":"11 Steps Attackers Took to Crack Target. https:\/\/www.csoonline.com\/article\/2601021\/11-steps-attackers-took-to-crack-target. html Retrieved","author":"Olavsrud Thor","year":"2022","unstructured":"Thor Olavsrud . 2014. 11 Steps Attackers Took to Crack Target. https:\/\/www.csoonline.com\/article\/2601021\/11-steps-attackers-took-to-crack-target. html Retrieved March 6, 2022 from Thor Olavsrud. 2014. 11 Steps Attackers Took to Crack Target. https:\/\/www.csoonline.com\/article\/2601021\/11-steps-attackers-took-to-crack-target. html Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243776"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"e_1_3_2_2_40_1","volume-title":"All 3 Billion Yahoo Accounts Were Affected by 2013 Attack. https:\/\/www.nytimes.com\/2017\/10\/03\/technology\/yahoo-hack-3-billion-users.html Retrieved","author":"Perlroth Nicole","year":"2022","unstructured":"Nicole Perlroth . 2017. All 3 Billion Yahoo Accounts Were Affected by 2013 Attack. https:\/\/www.nytimes.com\/2017\/10\/03\/technology\/yahoo-hack-3-billion-users.html Retrieved March 6, 2022 from Nicole Perlroth. 2017. All 3 Billion Yahoo Accounts Were Affected by 2013 Attack. https:\/\/www.nytimes.com\/2017\/10\/03\/technology\/yahoo-hack-3-billion-users.html Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611974348.22"},{"key":"e_1_3_2_2_42_1","volume-title":"Sigma: Generic Signature Format for SIEM Systems. https:\/\/github.com\/SigmaHQ\/sigma Retrieved","author":"Roth Florian","year":"2022","unstructured":"Florian Roth and Thomas Patzke . 2022 . Sigma: Generic Signature Format for SIEM Systems. https:\/\/github.com\/SigmaHQ\/sigma Retrieved March 6, 2022 from Florian Roth and Thomas Patzke. 2022. Sigma: Generic Signature Format for SIEM Systems. https:\/\/github.com\/SigmaHQ\/sigma Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623674"},{"key":"e_1_3_2_2_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243829"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243763"},{"key":"e_1_3_2_2_46_1","volume-title":"Data Breach a 'Huge Cyber Espionage Campaign Targeting the U.S. Government'. https:\/\/www.secureworldexpo.com\/industry-news\/data-breach-cyber-espionage-campaign-targeting-u.s.-government Retrieved","author":"News Team SecureWorld","year":"2022","unstructured":"SecureWorld News Team . 2020. Data Breach a 'Huge Cyber Espionage Campaign Targeting the U.S. Government'. https:\/\/www.secureworldexpo.com\/industry-news\/data-breach-cyber-espionage-campaign-targeting-u.s.-government Retrieved March 6, 2022 from SecureWorld News Team. 2020. Data Breach a 'Huge Cyber Espionage Campaign Targeting the U.S. Government'. https:\/\/www.secureworldexpo.com\/industry-news\/data-breach-cyber-espionage-campaign-targeting-u.s.-government Retrieved March 6, 2022 from"},{"key":"#cr-split#-e_1_3_2_2_47_1.1","unstructured":"Dr. Carl Weir Rody Arantes Henry Hannon and Marisha Kulseng. 2021. Operationally Transparent Cyber (OpTC). https:\/\/doi.org\/10.21227\/edq8-nk52 10.21227\/edq8-nk52"},{"key":"#cr-split#-e_1_3_2_2_47_1.2","unstructured":"Dr. Carl Weir Rody Arantes Henry Hannon and Marisha Kulseng. 2021. Operationally Transparent Cyber (OpTC). https:\/\/doi.org\/10.21227\/edq8-nk52"},{"key":"e_1_3_2_2_48_1","volume-title":"https:\/\/en.wikipedia.org\/wiki\/Stuxnet Retrieved","year":"2022","unstructured":"Wikipedia. 2022. Stuxnet. https:\/\/en.wikipedia.org\/wiki\/Stuxnet Retrieved March 6, 2022 from Wikipedia. 2022. Stuxnet. https:\/\/en.wikipedia.org\/wiki\/Stuxnet Retrieved March 6, 2022 from"},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978378"}],"event":{"name":"ASIA CCS '22: ACM Asia Conference on Computer and Communications Security","location":"Nagasaki Japan","acronym":"ASIA CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3523261","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3488932.3523261","content-type":"text\/html","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3523261","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3488932.3523261","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T19:31:27Z","timestamp":1750188687000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3488932.3523261"}},"subtitle":["Prize Collecting the Audit Logs for Threat Hunting on Enterprise Network"],"short-title":[],"issued":{"date-parts":[[2022,5,30]]},"references-count":50,"alternative-id":["10.1145\/3488932.3523261","10.1145\/3488932"],"URL":"https:\/\/doi.org\/10.1145\/3488932.3523261","relation":{},"subject":[],"published":{"date-parts":[[2022,5,30]]},"assertion":[{"value":"2022-05-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}