Use when you need to classify an IP as internet scanner noise vs. targeted activity. Returns noise/riot flags, classification (benign/malicious/unknown), actor name if known. IP-only. Commonly invoked by /ip-investigation to filter out mass-scanning noise. Retrieval only.
日本語の概要は準備中です。原文の説明を表示しています。
Liberty91LTD/cti-skills272026年9月30日 更新