Here are some high-level behavioral fingerprinting categories and concepts.
| Category | Description |
|---|---|
| input analysis | typing cadence, mouse movement, touch gestures, HID usage |
| command and tool usage | shell command patterns, tool choices, flags, environment, software settings |
| network behavior | traffic timing, protocol usage, destination patterns, … |
| software behavior | how software behaves in context–e.g., unexpected resource access or interactions |
| working hours | time of day patterns, session durations, timezone inference, … |
| natural language processing | writing style, grammar and vocabulary, emoji usage, linguistic quirks, typos, … |
| voice analysis | accent, cadence, pitch, voiceprint features, … |
| RF constellations | proximity of known wireless devices (Wi-Fi, Bluetooth, …) and transmission habits |
| hardware fingerprinting | perhipheral choices, hardware choices, electronic quirks of specific peripherals |
| gait and motion analysis | walking style, speed, etc. common with wearable devices and cell phones |
| spending habits | purchase timing, vendor preferences, transaction types, … |
| content consumption | articles, videos, or topics regularly read or view can reveal intent, beliefs, and routines |
| power consumption | power consumption can be used to correlate activity, application usage, … |
| proximity behavior | patterns of nearby devices or people discovered via RF constellations, GPS, etc |