Cyber Risks · GreyNoise Blog

Grey Noise | Trends Feature

Summary: GreyNoise's Trends feature shows how many hits its sensor network has recorded for any of its Tags at hourly and daily granularity, with each Tag page carrying a timeline, associated CVE information, and related resources. The company classifies a tag as trending when sensors see a significant increase in the average number of IPs transmitting traffic within a 3-day period, and as an anomaly when sensors see a sudden peak in transmitting IPs within a 10-day period, with each list showing the top ten tags.

Key Takeaway: GreyNoise's own definition of a trend is a 3-day window and an anomaly a 10-day window, so the signal a defender acts on is already days old by the time it appears on the list.

Read the original at GreyNoise Blog ↗

Topics
Vulnerabilities & Patching
Related