Automated analysis of notable attacker behavior observed by the bathysphere honeynet. Generated when something unusual surfaces — novel command sequences, coordinated campaigns, or tactics worth documenting.