File size: 861 Bytes
5a3b9db
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
app:
  name: "SentinelAI"
  environment: "development"
  version: "1.0.0"

paths:
  raw_data: "data/raw"
  processed_data: "data/processed"
  artifacts: "artifacts"
  predictions: "predictions"
  reports: "reports"
  database: "database/sentinel.duckdb"

duckdb:
  memory_limit: "4GB"
  threads: 4

risk_weights:
  rule_contribution: 0.30
  stat_contribution: 0.10
  ml_contribution: 0.40
  behavioral_contribution: 0.10
  device_contribution: 0.10

classification_labels:
  - "Normal Authentication"
  - "Credential Stuffing"
  - "Password Spray"
  - "Brute Force"
  - "Impossible Travel"
  - "Insider Threat"
  - "Privilege Abuse"
  - "Suspicious Device"

recommendations:
  Low: "Monitor"
  Moderate: "Review activity"
  Elevated: "Step-up Authentication"
  High: "Require MFA, Notify SOC"
  Critical: "Lock account, Block authentication, Escalate incident"