Hello,

I would like to know more about the slow port scans that happen
commonly prior to real attacks. Is there anybody working on it? How
can we go about analyzing such a scenario? Kindly reply.

Thanks

Ciza