I'm storing each time a
User performs an
action against an
I would like to detect when there are unusual patterns. These patterns
could be a
user who performs a particular
action across an excesive
object which has too many of a single
performed by different
users and so on.
I could code in my own checks like::
windows_opened = [x for x in all_windows if x.action == "open" and x.user == "Bob"] if len(windows_opened) > MAX_OBJECT_OPENS: # Record unusual pattern
And while I will likely do this for some of the more obvious patterns I would like for the system to be able to spot unusual patterns I might not have thought of.