Provenance-Based Intrusion Detection For Automated Rule Generation, Alarm Reasoning Enhancement, And False Alarms Reduction