Sequence Detection

Detecting attacker activity by chaining ordered events that, individually benign, indicate compromise together, written as multi-step detection logic that fires only when the sequence completes.