toolsmith #133 – Anomaly Detection & Threat Hunting with Anomalize
When, in October and November’s toolsmith posts, I redefined DFIR under the premise of Deeper Functionality for Investigators in R, I discovered a “tip of the iceberg” scenario. To that end, I’d like to revisit the concept with an additional discovery …