I’d say anecdotally that this is true, though maybe not for ddos behavior; it certainly makes sense to attack when less people are at the office