Fascinating dataset and neat ideas in here: “Clustering and associating attacker activity at scale”

https://www.fireeye.com/blog/threat-research/2019/03/clustering-and-associating-attacker-activity-at-scale.html