Data Science, Artificial Intelligence, Open Data, Open Source, Botnet.
FROM incidents WHERE day >= DATE_ADD('day', -{days_back}, CURRENT_DATE) AND CARDINALITY(ips) >= {min_ips_in_incident} Figure 3: Incidents SQL with experiment parameters The results of the first stage of the query are incident records. Each row has the following columns: id — Incident id ip —