"If you're only relying on http headers, you're missing all but the most trivial of bots" Very true. Capturing, processing, and storing analytics data long-ter

"If you're only relying on http headers, you're missing all but the most trivial of bots" Very true. Capturing, processing, and storing analytics data long-term is expensive. If I eliminate even 50% of that noise, the savings will be worth it. I'm attempting to identify the bulk of bots with http headers and real-time session monitoring. I also have an unauthorized list (known bad actors) and an ignore list (search bots, etc.). It works pretty well but definitely doesn't begin address the problem as a whole (from a security perspective). It's an interesting and complex topic.