An end-to-end method for advanced persistent threats reconstruction in large-scale networks based on alert and log correlation.