Glossary: Security Monitoring and Automation

low-and-slow

Also written: low-and-slow guesser

An attack spread out slowly enough to stay under short-window thresholds, like 203.0.113.88 guessing about once every 25 minutes all week. A daily rule with a long window catches it.