Ninja Labz film · 2026-09-24 · live production data
Adversary DNA: we named the botnet
From one suspicious request to a named Mirai botnet at 0.91 confidence, with the evidence chain and an incident Claude triages on its own. Local sensors fingerprint hostile traffic; the attribution engine combines independent evidence with noisy-OR.
- 41,794 edge requests fingerprinted in one day
- 0.54 s for the local sensor to read all of them
- Mirai named at 0.91 confidence from our own logs
- Six independent kinds of evidence, combined with noisy-OR
