It was indeed a great journey to understand network analysis with Maltrail.
Here is the link of the official documentation of Maltrail.
Also,
it uses advanced heuristic mechanisms that can help in discovery of
unknown threats, example new malware. Maltrail will warn about the
potential port scanning as a result of its heuristic mechanism
detection. Maltrail's daily updated blacklist of malware‑related
domains can be found here,
which can be safely used for DNS traffic‑blocking purposes.
And here is the list of third‑party integrations with Maltrail.