Advancing Cyber Incident Timeline Analysis Through Rule Based AI and Large Language Models

FY Loumachi, MC Ghanem - arXiv preprint arXiv:2409.02572, 2024 - arxiv.org
Timeline Analysis (TA) plays a crucial role in Timeline Forensics (TF) within the field of
Digital Forensics (DF). It focuses on examining and analyzing time-based digital artefacts …

Advanced Persistent Threats (APT) Attribution Using Deep Reinforcement Learning

AS Basnet, MC Ghanem, D Dunsin… - arXiv preprint arXiv …, 2024 - arxiv.org
This paper investigates the application of Deep Reinforcement Learning (DRL) for attributing
malware to specific Advanced Persistent Threat (APT) groups through detailed behavioural …

A novel reinforcement learning model for post-incident malware investigations

D Dunsin, MC Ghanem, K Ouazzane… - arXiv preprint arXiv …, 2024 - arxiv.org
This Research proposes a Novel Reinforcement Learning (RL) model to optimise malware
forensics investigation during cyber incident response. It aims to improve forensic …