{"id":"W4385819961","doi":"10.1109/comst.2023.3299519","title":"A Survey on Threat Hunting in Enterprise Networks","year":2023,"lang":"en","type":"article","venue":"IEEE Communications Surveys & Tutorials","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":72,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; Ericsson (Canada)","funders":"Concordia University","keywords":"Computer security; Computer science; Intrusion detection system; Proactivity; Cyber threats; Honeypot; Risk analysis (engineering); Business","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00218193,0.001509221,0.0007640254,0.007593045,0.001274281,0.003879552,0.001545735,0.002201314,0.005112691],"category_scores_gemma":[0.007383272,0.0006111434,0.0009065307,0.00897317,0.001002003,0.00930482,0.001815589,0.001640085,0.001896569],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00129525,"about_ca_system_score_gemma":0.001597414,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002526286,"about_ca_topic_score_gemma":0.002745142,"domain_scores_codex":[0.9973145,0.000618183,0.0003535542,0.0002798942,0.001198825,0.000234937],"domain_scores_gemma":[0.9928448,0.00519383,0.0005864035,0.0002741005,0.000920995,0.0001797672],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00005774715,0.0001105646,0.005082467,0.01074272,0.00007359501,0.0004947628,0.00222579,0.002758618,0.001466613,0.037983,0.03949256,0.8995115],"study_design_scores_gemma":[0.000006037225,0.0001303452,0.006926742,0.01365423,0.0000989245,0.002861544,0.003751664,0.00352648,0.001284992,0.01577402,0.9518852,0.00009989464],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"review","genre_gemma":"review","genre_scores_codex":[0.02091595,0.8156214,0.05098877,0.00469003,0.001814722,0.0003833405,0.0008029696,0.0005747611,0.104208],"genre_scores_gemma":[0.08359455,0.8726516,0.02402288,0.002323735,0.0009079346,0.0002308113,0.001444774,0.0001456134,0.01467813],"genre_candidate":"review","genre_consensus":"review","teacher_disagreement_score":0.007593045,"threshold_uncertainty_score":0.01710361,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.069135832241313,"score_gpt":0.3159311962596011,"score_spread":0.2467953640182881,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}