Hi, I am a undergraduate and I plan on building an anomaly detection model to identify suspicious user logins for a Windows AD environment. Basically I want my model to detect untimely logins (deviations from the normal times users logged in previously) and successful login attempts from unusual IP addresses. My biggest limitation is lack of a proper dataset for the problem. I was unable to find any publicly available datasets for the problem.
Can someone please suggest a method to build this or a place to find a dataset? Or any type of help related to this, any previous work done by others? Pretty much any reply is highly appreciated ☺️