FilesExpand file tree

 main

/

default.yaml

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

47 lines (44 loc) · 919 Bytes

 main

/

default.yaml

Top

File metadata and controls

• Code
• Blame

47 lines (44 loc) · 919 Bytes

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

input_path: data/raw/sample_events.jsonl

output_dir: data/processed

time:

timestamp_col: timestamp

window_size_seconds: 60

step_size_seconds: 10

features:

count_event_types:

- login_fail

- login_success

- config_change

- malware_alert

- policy_denied

error_statuses:

- fail

- blocked

severity_levels:

- high

- critical

rules:

cooldown_seconds: 60

high_error_rate:

threshold: 0.30

severity: medium

login_fail_burst:

threshold: 8

severity: high

high_severity_spike:

threshold: 3

severity: high

persistent_high_error:

threshold: 0.25

consecutive_windows: 2

severity: medium

source_spread_spike:

absolute_threshold: 10

multiplier: 1.3

severity: medium

rare_event_repeat:

threshold: 2

event_types:

- malware_alert

- policy_denied

severity: high