Good presentation from Bit9 on using sandboxing to potentially identify APT’s.