[x] Please run a kruskal wallis test on number of number of commands (two cases: all data, without 0 commands).
[x] what inputs does Kruskal-Wallis Wallis rest even require?
if its ratio we can use the ratio of commands
if its not
[ ] Figure out quantitative method of determining level of invasiveness of a session
[x] Please send updated boxplots of number of commands (all data, excluding 0 commands).
by excluding sessions of 0 commands we should be able to avoid all sessions where an error occurred in the data and attacker wasn't let in properly/didnt exit.
figure out how to zip/store/data collect off host
send the boxplots of the number of commands when considering only unique IPs.
AaronGorbaty
commented
11 months ago
ToDo