Improving Long Tail Analysis Using Neighborhood Keeper
ID: 2a8f6c8c-5784-5712-8f3c-390d45750da3
STIX ID: report--2a8f6c8c-5784-5712-8f3c-390d45750da3
Feed Name: Dragos Blog
This blog explains how Neighborhood Keeper leverages long tail analysis to find low-occurrence, potentially meaningful network events by building baselines and using the portal's "Least Common Threat Analytic" and trends/comparison views to contextualize whether anomalies are local or seen across the community; unexplained anomalies should be prioritized for investigation. The post also describes time-bound and trends views for analysis and previews a follow-up on strategic analysis use cases.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
