TLDR Tech / InfoSec
tempolocus (GitHub Repo)
tempolocus from the AIL Project infers a threat actor's probable location from time-series activity patterns: weekly hourly buckets, yearly daily buckets, or raw timestamp lists such as PE TimeDateStamp values. It ranks timezone offsets and probable countries from quiet-window analysis, matches yearly activity against public-holiday calendars across 80+ regions (including a public-worker profile covering China and Russia government closure patterns), and classifies activity as work-time, vacation-time, or mixed-time. Output is probabilistic JSON, usable via CLI or as a Python library with detect and analyze_activity entry points, licensed AGPL-3.0.
Read the full story