Behaviour Profiles

Behaviour profiles shape generated events:

• Interactive.
• Bulk.
• Periodic.
• Burst.
• Beacon.
• Long-lived.
• Asymmetric download/upload.
• Scan-like.
• Brute-force-like.
• Enumeration-like.
• Exfiltration-like.
• Lateral-movement-like.

Profiles define packet, byte, duration, repeat, jitter, flags, and ratio ranges.