In the game of cat and mouse with hackers, it is always important to be a little "ahead". This means that the earlier the first signs of an attack are registered, the smaller the damage caused will be.
Established automated security systems must always strike a balance between too much detection (false positives) and too little detection (false negatives).
"Detection and response systems or services, on the other hand, are non-invasive and can thus act as early warning systems to report the first suspicions without affecting the user.
In this lecture, Peter Aicher shows how such an early warning system can be implemented.
Translated with www.DeepL.com/Translator (free version)