Commentary by Mark Wahl, CISA
Recent publications on anomalous directory client activity detection (20090417)
I saw the US patent application 12/287,632 for a system and method for anomalous directory client activity detection was published yesterday.
This invention describes an approach for parsing an access log generated by a directory server, and constructing a data structure: