Linked Presentation: SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection
