idps-escape

User guide

Via ADBox one can create detectors and use them to detect anomalous behaviors in chosen data. To do so, it is sufficient to compile a use case file summarizing the necessary information and run the following command via the terminal

./adbox.sh -u {number}

where {number} is the number associated with the use case.

A complete overview of how to define a use case is given in the use case definition guide.

Via a use case one can

• create a detector, by including the training settings.
• use a detector for prediction, by including the prediction settings.
• both, by including both trainingand prediction settings.

Indeed, if the training/prediction key is present, the ADBox starts the corresponding pipeline in the anomaly detection engine.

This site is open source. Improve this page.