delivered / Security Analytics / 2019 -> 2022
Security Ops: User Behavior Analytics & Anomaly Detection
Behavioral baselines and explainable anomaly signals for SOC triage and investigation.
Constraint Data volume is high; latency and cost constraints matter.
Select a signal node to inspect its operating principle.
- TelemetryNormalize multi-source logs.
- BaselinesModel user, session, and device behavior.
- SignalsScore anomalies with controllable thresholds.
- SOC triageKeep every alert explainable.
Data pipeline, feature engineering, anomaly detection, and methodology documentationPySpark / Python / Unsupervised learning