Intelligence / Behavioral Classification

Behavioral Classification

How IntrusionLabs classifies attacker sessions across the kill chain — from low-depth scanners to interactive operators and malware droppers.

Credential Probe 1,208,852

avg depth: 0.20

MySQL Probe 501,774

avg depth: 0.20

Reconnaissance 396,885

avg depth: 0.60

Opportunistic Bruter 143,167

avg depth: 0.50

Scanner 134,262

avg depth: 0.15

Malware Dropper 119,641

avg depth: 1.00

Proxy Abuser 58,556

avg depth: 0.85

Web Probe 54,632

avg depth: 0.25

FTP Probe 44,793

avg depth: 0.20

Credential Harvester 26,828

avg depth: 0.40

Interactive Operator 18,679

avg depth: 0.90

Data Exfiltrator 1,154

avg depth: 0.90

Unknown 78

avg depth: 0.10