NAME
ThreatDetector::Handlers::RateLimiter - Detects rate-based abuse by tracking burst activity
SYNOPSIS
use ThreatDetector::Handlers::RateLimiter qw(handle_rate_burst);
handle_rate_burst($entry);
DESCRIPTION
Monitors how frequently a given IP sends requests. If the number of requests in a short time window exceeds a configured threshold, it emits an alert. This is useful for detecting denial-of-service attempts, scraping bots, or brute-force login attempts spread across different endpoints.
AUTHOR
Jason Hall <jason.kei.hall@gmail.com>