anti 627fa59c15 feat(profiler/behave_shell): emit temporal.session_duration ...

Bucket ctx.duration_s against SESSION_DURATION_SHORT_MAX (60s) /
MEDIUM_MAX (600s) / LONG_MAX (3600s); else marathon. Direct
measurement, confidence 0.85. Skip emission only when no commands
and zero duration. New _features/temporal.py module opens Phase E.

2026-05-04 00:10:57 -04:00

..

behave_shell

feat(profiler/behave_shell): emit temporal.session_duration

2026-05-04 00:10:57 -04:00

__init__.py

feat: add behavioral profiler for attacker pattern analysis

2026-04-15 12:51:19 -04:00

behavioral.py

feat(sniffer): capture SSH client banner from TCP stream

2026-04-22 21:37:01 -04:00

classify.py

refactor(profiler): split behavioral.py into topical modules

2026-04-22 21:10:19 -04:00

fingerprint.py

feat(sniffer): ISN sequence classifier (reuses seq_class helper)

2026-04-26 20:30:24 -04:00

identity_rollup.py

feat(prober-cert): roll up fingerprints onto AttackerIdentity

2026-04-28 11:28:54 -04:00

phases.py

refactor(profiler): split behavioral.py into topical modules

2026-04-22 21:10:19 -04:00

timing.py

refactor(profiler): split behavioral.py into topical modules

2026-04-22 21:10:19 -04:00

tools.py

refactor(profiler): split behavioral.py into topical modules

2026-04-22 21:10:19 -04:00

worker.py

feat(profiler): backfill Credential.attacker_uuid on attacker upsert

2026-04-26 03:30:44 -04:00