Interval-Regular Authentication Attempts

Consistent login cadence can indicate automation even when absolute volume looks normal.

Focus on interval regularity, scope of account targeting, and adjacency to persistence artifacts.