attack-detection GitHub Topics
IP.blackhole is an IP blacklist that uses multiple sensors to identify network attacks (e.g. SSH brute force) and spam incidents. See AI threat detection for the methods and models involved. TDIR is the full lifecycle that wraps detection — the first phase — together with investigation and response into one continuous workflow. The new TA0005
attack-detection GitHub Topics Read More »