Namespace com.ibm.streams.cybersecurity.analytics

Operators

• DNSTunneling: The DNSTunneling operator analyzes DNS response traffic and reports suspicious behaviour that may indicate the presence of DNS tunneling in the network.
• DomainProfiling: The DomainProfiling operator analyzes DNS response traffic and reports whether or not the behaviour of the domain is suspicious.
• HostProfiling: The HostProfiling operator analyzes DNS response traffic and reports whether or not the behaviour of the hosts are suspicious.
• PredictiveBlacklisting: The PredictiveBlacklisting operator analyzes the feature vector produced by the PredictiveBlacklistingFE operator using an SPSS model.