Building ML models for Advanced Persistent Threat detection. Current approach uses ensemble methods with behavioral analysis. Seeking insights on feature engineering for network traffic and endpoint telemetry.