3 ms·AIQL: Enabling Efficient Attack Investigation from System Monitoring Data [pdf]2 points by lainon 8y ago