Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job

Following on from our preview, here’s Ben Gelman and Sean Bergeron’s research on enhancing command line classification with benign anomalous data