Fig. 3
From: Forecasting cyberattacks with incomplete, imbalanced, and insignificant data

An example of how cross correlation is used to find Δt and Tl
From: Forecasting cyberattacks with incomplete, imbalanced, and insignificant data
An example of how cross correlation is used to find Δt and Tl