dga Detection Gap Analysis library and testing suite Library of attack patterns (series of logs on a timer) Send them to an http endpoint on the configured schedule Selector for different onboarded tools that highlights available patterns