{"id":"W2967385703","doi":"10.4018/978-1-5225-9742-1.ch007","title":"Threat Hunting in Windows Using Big Security Log Data","year":2019,"lang":"en","type":"book-chapter","venue":"Advances in information security, privacy, and ethics book series","topic":"Software System Performance and Reliability","field":"Computer Science","cited_by":6,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Intrusion detection system; Anomaly detection; Computer science; Host (biology); Data mining; Anomaly-based intrusion detection system; Anomaly (physics); Parsing; Volume (thermodynamics); Network security; Big data; Artificial intelligence; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","scholarly_communication"],"consensus_categories":[],"category_scores_codex":[0.0025038,0.0005378642,0.000770711,0.0005236114,0.0002910174,0.0004237132,0.00190932,0.0009824339,0.00001598166],"category_scores_gemma":[0.0004229342,0.0005177023,0.00007772475,0.0001982708,0.0004107121,0.02383633,0.003025862,0.00218838,0.00004912565],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001875475,"about_ca_system_score_gemma":0.000680448,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001603896,"about_ca_topic_score_gemma":0.000878955,"domain_scores_codex":[0.9965191,0.00009677232,0.001397284,0.000699976,0.000794524,0.0004922994],"domain_scores_gemma":[0.9963096,0.0005071752,0.0007835797,0.002006801,0.0002992425,0.00009364507],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0001605911,0.00006915773,0.02363097,0.01080712,0.00007231948,0.00002844272,0.1025452,0.00119202,0.000001742979,0.8158513,0.0002430169,0.04539813],"study_design_scores_gemma":[0.0008557229,0.00009762121,0.0003485407,0.002132082,0.00001898393,0.00008889163,0.0005268132,0.01590762,0.00002993533,0.2038271,0.7751284,0.001038241],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"other","genre_gemma":"empirical","genre_scores_codex":[0.01280071,0.09878609,0.05403383,0.006284448,0.01720205,0.008567713,0.000909963,0.001641504,0.7997737],"genre_scores_gemma":[0.4995039,0.4403798,0.03275155,0.01003725,0.002117022,0.0001474174,0.002467015,0.0003068568,0.01228923],"genre_candidate":"other","genre_consensus":null,"teacher_disagreement_score":0.7874845,"threshold_uncertainty_score":0.9997274,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04978101394802475,"score_gpt":0.3089980704573167,"score_spread":0.2592170565092919,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}