BERT Embeddings: A New Approach for Command Line Anomaly Detection

This article has been indexed from Blog – crowdstrike.com

Suspicious command lines differ from common ones in how the executable path looks and the unusual arguments passed to them Bidirectional Encoder Representations from Transformers (BERT) embeddings can successfully be used for feature extraction for command lines Outlier detectors on top of BERT embeddings can detect anomalous command lines without the need for data labeling […]

Read the original article: BERT Embeddings: A New Approach for Command Line Anomaly Detection