Detecting Anomalous User Behavior Using an Extended Isolation Forest Algorithm: An Enterprise Case Study
a geometric framework for unsupervised anomaly detection : detecting intrusions in unlabeled data .