python

Finding suspicious devices in firewall logs

Six Python detection rules that turn a day of normal traffic into a baseline, then explain which devices deserve a closer look.