Network anomaly detection in the Microsoft Windows system logs using machine learning methods
A. V. Pavlychev, K. S. Soldatov, V. A. Skazin · Proceedings of Tomsk State University of Control Systems and Radioelectronics · 2021
An algorithm for network anomaly detection in the system security logs of the Microsoft Windows operating system with using machine learning methods was developed. Preprocessing, clustering, and visualization of the studied data were carried out. The proposed algorithm has confirmed its efficiency by identifying events in the studied dataset that indicate the operation of a malicious software.