Kaspersky Machine Learning for Anomaly Detection

Scenario: working with Kaspersky MLAD

December 6, 2023

ID 248063

This section describes the actions that can be taken by a user when working in the main menu of Kaspersky MLAD.

The scenario for working with the application consists of the following steps:

  1. Creating presets to monitor the section of the protected facility

    For quick and more convenient access to necessary data, it is recommended to create presets that include tags corresponding to units of the industrial plant. If necessary, you can modify existing presets.

  2. Viewing historical data

    Go to the History section to view historical data of process parameters, generated predictions and identified incidents resulting from Kaspersky MLAD processing. Select the relevant preset and specify the date and time interval for viewing the data. Use the navigation to view historical data.

  3. Monitoring in online mode

    To view the received values of process parameters, their predicted values, and errors in the online mode, go to the Monitoring section. Select the relevant preset and time interval to display the incoming data.

  4. Viewing data in the Time slice section

    To view the values of the process parameters received from the monitored asset's sensors at a certain point in time, go to the Time slice section. Select the relevant preset and specify the date and time interval for viewing the data. Use the navigation to view data.

  5. Working with incidents

    Go to the Incidents section and view information about the registered incidents. Analyze the incidents and add expert opinions or comments where you can indicate if the registered incidents are anomalies.

    If you are subscribed to incident notifications, you will receive an email message when an abnormal situation arises. The message will indicate the date and time when the incident began and will provide a link you can use to go to the History section.

  6. Working with events and patterns

    View the events and patterns detected by the Event Processor in the Event Processor section. Create monitors to monitor specific events, patterns, and event parameter values.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.