Applying the Kill Chain and Diamond Models to Microsoft Advanced Threat Analytics
Anomaly-based network intrusion detection: Techniques, systems and challenges