Malicious Behavior Detection using Windows Audit Logs
Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks