{"id":"W4385819961","doi":"10.1109/comst.2023.3299519","title":"A Survey on Threat Hunting in Enterprise Networks","year":2023,"lang":"en","type":"article","venue":"IEEE Communications Surveys & Tutorials","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":72,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; Ericsson (Canada)","funders":"Concordia University","keywords":"Computer security; Computer science; Intrusion detection system; Proactivity; Cyber threats; Honeypot; Risk analysis (engineering); Business","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0125254,0.0001951937,0.0003222935,0.0003892639,0.0004423626,0.0002617466,0.002741803,0.00016634,0.00001481203],"category_scores_gemma":[0.0007003463,0.0002055624,0.00008814477,0.002861209,0.0001002027,0.0004619114,0.0007807508,0.0004744171,0.0003365661],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001152842,"about_ca_system_score_gemma":0.00006949852,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002878913,"about_ca_topic_score_gemma":0.008063104,"domain_scores_codex":[0.9925978,0.005606784,0.000617189,0.0004265495,0.0003101718,0.000441459],"domain_scores_gemma":[0.9925485,0.00391675,0.0002030614,0.003073838,0.0001719221,0.0000859752],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"observational","study_design_scores_codex":[0.0001306729,0.001669848,0.1577196,0.00003572719,0.0001862301,0.00004246577,0.007552214,0.07005513,0.001134402,0.03361263,0.04935459,0.6785065],"study_design_scores_gemma":[0.0009561632,0.0001661284,0.5609975,0.000240906,0.000007385322,0.000003164621,0.00003701294,0.4162318,0.0004260923,0.003499512,0.01677153,0.0006628036],"study_design_candidate":"observational","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6378735,0.001875816,0.311865,0.002794617,0.03187294,0.002243073,0.00009827476,0.003406013,0.007970688],"genre_scores_gemma":[0.9970455,0.001474766,0.0006100906,0.0001292528,0.0003531298,0.00008612335,0.00007753247,0.00002037979,0.0002032576],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.6778437,"threshold_uncertainty_score":0.8382592,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.069135832241313,"score_gpt":0.3159311962596011,"score_spread":0.2467953640182881,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}