Specifically detecting latent APT attacks, using endpoint host logs to detect suspicious events and sequences of attack behaviors, and giving hackers early warning before completing the attack steps. End-point Security Aanlysis technique has been utilized in Mitre Att&ck evaluation for ICS.

In recent years, the ransomware has invaded critical infrastructure, and enterprises lack APT attack chain identification technology that combines intelligence and AI assistance, which can help enterprises identify hacker attacks in advance, respond to threats in advance, actively profile hacker attack trajectories through AI technology, and accurately detect APT attacks through MITRE ATT &CK technical rules, and then deploy ahead of time.