BAD: Behavior Anomaly Detection. It learns what normal looks like on your fleet, then tells your SIEM when a user stops looking like themselves. A tool, not an agent: no daemon, no keystroke content, no drama.
python windows macos linux security machine-learning mouse python3 siem anomaly-detection isolation-forest blue-team threat-detection insider-threat behavior-analytics mouse-movement-analysis typing-cadence-analysis
-
Updated
Sep 29, 2026 - Python