Insiders Abnormal Activities

This is a synthetic dataset designed to emulate the daily activities of 500 employees in an organizational environment, encompassing both routine and anomalous behaviors. The dataset consists of 23,483 records and features 17 domain-informed attributes representing user interactions, such as login patterns, file access, data transfers, and software installations. Each employee's activities are recorded over a period of time allowing for the learning and analysis of individual behavioral patterns. Additionally, the dataset includes two key columns: RiskScore and RiskLabel, which quantify the level of risk associated with each employee’s activities based on detected abnormal behaviors. The RiskScore provides a numerical measure of risk, while the RiskLabel categorizes employees according to their respective risk levels, facilitating threat detection and security analysis.