46 days vs. 16 minutes: Detecting emerging threats and reducing dwell time with machine learning
Using ML-based anomaly detection, such as the unsupervised ML jobs in the Elastic stack, we can shrink the dwell time for this malware persistence mechanism from 46 days to less than one day, a decrease by a factor of 1100!
