Unsupervised anomaly detector that flags early breach precursors (credential dumping, process injection) using Isolation Forest on EDR-style process features. Inspired by CrowdStrike-style EDR — includes confidence gating and human-readable explanations—deployed on Streamlit Cloud.
open-source machine-learning scikit-learn data-visualization cybersecurity feature-engineering unsupervised-learning anomaly-detection isolation-forest edr threat-detection security-analytics shap streamlit credential-access
-
Updated
Jun 25, 2026 - Python