Security News > 2016 > February > Incident identification through outlier analysis (SANS Reading Room)