jun-zeng/ShadeWatcher

SHADEWATCHER: Recommendation-guided Cyber Threat Analysis using System Audit Records, Oakland'22

ShadeWatcher

Environment

ShadeWatcher runs on the 16.04.3 LTS Ubuntu Linux 64-bit distribution. You should install this distro before proceeding.

Installation

• audit setup

• parser setup

• recommendation setup

Usage

• auditing

• parsing

• recommending

DATASET

• DARPA Transparent Computing DATASET

• Examples: We prepare two example of audit data under data/examples.