A Splunk MLTK prototype for detecting anomalous VPN logins.

splunk-vpn-anomaly-detection
A Splunk MLTK prototype for detecting anomalous VPN logins.

Machine Learning-Based VPN Anomaly Detection in Splunk
This project is a prototype submitted for the HackerEarth Splunk Build-a-thon Track 4: AI/ML. It uses Splunk's Machine Learning Toolkit MLTK to detect anomalous VPN logins based on geography and time.

Problem Statement
As described in the "VPN Login from an Unusual Location per User Model" use case, traditional security tools struggle to detect credential theft when valid credentials are used. This model establishes a baseline of normal login behavior for each user typical locations and hours and flags any significant deviations as potential security threats.
github link : cant paste here type on browser "saicharan421k github" open that find a repo name :splunk-vpn-anomaly-detection, go check for files , process and additional information.

Видео A Splunk MLTK prototype for detecting anomalous VPN logins. канала Saicharan Lokineni