Event Processor

The Kaspersky MLAD Event Processor is designed to detect regularities in the form of recurring events and patterns in the stream of events received from monitored assets and from the Anomaly Detector service, as well as to detect new events and patterns. New events and patterns may indicate an anomaly in the monitored asset operation.

Sequence of events or other patterns identified within the stream of events from the monitored asset.

Set of values describing a change in the state of a monitored asset based on a predefined list of parameters, with the timestamp of the change.