domains / families / security / threat-detection

threat-detection

separate

Exact detection thresholds for identifying malicious network patterns including port scans, DoS attacks, and beaconing behavior.

When to use

• Port scan detection
• DoS pattern detection
• C2 beaconing detection
• Benign traffic assessment

When not to use

• Simple port count detection

Skill page

Source