LogKernel: A Threat Hunting Approach Based on Behaviour Provenance Graph and Graph Kernel Clustering

Figure 6

Density-based partitioning method. The dependencies are expressed as points on the time axis.