Threat hunting and detection
in the real world.

Use process, network and registry evidence to find suspicious activity before an alert tells the whole story.