Abstract: Described herein are various examples of techniques for evaluation of entities communicating over a network. An example method may include receiving a set of network traffic data and a potential bot candidate associated with the set of network traffic data. The example method may also include adjusting a bot risk assessment associated with the potential bot candidate by analyzing a subset of the set of network traffic data corresponding to the potential bot candidate via an expert machine learning model trained to detect attack vectors based on network traffic data associated with potential bot candidates. The example method may further include outputting the bot risk assessment associated with the potential bot candidate. Various other systems, methods, and computer-readable media are also disclosed.