Discovering anomalous patterns via machine learning helps detect adversaries who bypass modern security software through “living off the land” techniques.

In this post, we describe this process of transitioning from strict query syntax toward building a user-friendly interface flexible enough to answer questions.

Endgame introduces Artemis, a first-of-its-kind intelligent assistant for cyber defense operations with these challenges in mind.