So to disable specific functions of the script lets say you want to keep WAF firewall checks running and you want to disable IP address flooding checks you can do so ...

Most ML models need labeled data — someone has to tag thousands of examples as "attack" or "not attack" before the model can learn. In real security work you don't have that. New attacks appear ...