behavior or compromise resulted from an intentional attack, and if so,
in understanding the attack patterns so as to better resist or tolerate it.
After compromises, evidence trails also aid resilience, i.e., recovery,
diagnosis and repair, forensics, and accountability. Records of