Fig. 2From: OMMA: open architecture for Operator-guided Monitoring of Multi-step AttacksExample of an EDL signature called UserLogin for a simple login onto a Windows system, by Jaeger et al. [2]Back to article page