mikrotik/labs
1
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

CSAI2026 labs: Lab-2..Lab-6 (Practical + Solution, data), Module-2..Module-6 notebooks and datasets

Browse Source
This commit is contained in:
mikrotik
2026-10-12 19:16:14 +07:00
commit 2fefa615cc
184 changed files with 1016761 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Lab-2/Lab-2-Solution/output/auth_log_analysis.png
BIN
View File
Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 51 KiB

Lab-2/Lab-2-Solution/output/capstone_clean_auth_log.csv
+18
View File
@@ -0,0 +1,18 @@
timestamp,source_ip,username,status,hour,is_off_hours
2026-09-01 10:00:12+00:00,203.0.113.55,admin,SUCCESS,10,False
2026-09-01 10:01:23+00:00,198.51.100.14,guest,FAILED,10,False
2026-09-01 10:01:28+00:00,198.51.100.14,root,FAILED,10,False
2026-09-01 10:01:33+00:00,198.51.100.14,admin,FAILED,10,False
2026-09-01 10:02:15+00:00,203.0.113.55,jdoe,SUCCESS,10,False
2026-09-01 10:03:01+00:00,192.0.2.88,admin,SUCCESS,10,False
2026-09-01 10:03:45+00:00,198.51.100.14,jdoe,FAILED,10,False
2026-09-01 10:03:51+00:00,198.51.100.14,admin,FAILED,10,False
2026-09-01 10:04:10+00:00,198.51.100.14,admin,FAILED,10,False
2026-09-01 22:15:00+00:00,192.0.2.99,nightops,FAILED,22,True
2026-09-01 23:40:00+00:00,192.0.2.99,admin,FAILED,23,True
2026-09-02 01:05:00+00:00,198.51.100.14,root,FAILED,1,True
2026-09-02 01:10:00+00:00,203.0.113.77,unknown,FAILED,1,True
2026-09-02 06:10:00+00:00,203.0.113.55,alice,SUCCESS,6,False
2026-09-02 07:20:00+00:00,192.0.2.88,bob,SUCCESS,7,False
2026-09-02 07:25:00+00:00,192.0.2.88,bob,SUCCESS,7,False
2026-09-02 10:30:00+00:00,198.51.100.14,admin,FAILED,10,False
1 timestamp source_ip username status hour is_off_hours
2 2026-09-01 10:00:12+00:00 203.0.113.55 admin SUCCESS 10 False
3 2026-09-01 10:01:23+00:00 198.51.100.14 guest FAILED 10 False
4 2026-09-01 10:01:28+00:00 198.51.100.14 root FAILED 10 False
5 2026-09-01 10:01:33+00:00 198.51.100.14 admin FAILED 10 False
6 2026-09-01 10:02:15+00:00 203.0.113.55 jdoe SUCCESS 10 False
7 2026-09-01 10:03:01+00:00 192.0.2.88 admin SUCCESS 10 False
8 2026-09-01 10:03:45+00:00 198.51.100.14 jdoe FAILED 10 False
9 2026-09-01 10:03:51+00:00 198.51.100.14 admin FAILED 10 False
10 2026-09-01 10:04:10+00:00 198.51.100.14 admin FAILED 10 False
11 2026-09-01 22:15:00+00:00 192.0.2.99 nightops FAILED 22 True
12 2026-09-01 23:40:00+00:00 192.0.2.99 admin FAILED 23 True
13 2026-09-02 01:05:00+00:00 198.51.100.14 root FAILED 1 True
14 2026-09-02 01:10:00+00:00 203.0.113.77 unknown FAILED 1 True
15 2026-09-02 06:10:00+00:00 203.0.113.55 alice SUCCESS 6 False
16 2026-09-02 07:20:00+00:00 192.0.2.88 bob SUCCESS 7 False
17 2026-09-02 07:25:00+00:00 192.0.2.88 bob SUCCESS 7 False
18 2026-09-02 10:30:00+00:00 198.51.100.14 admin FAILED 10 False
Lab-2/Lab-2-Solution/output/capstone_summary.txt
+13
View File
@@ -0,0 +1,13 @@
SECURITY ANALYSIS SUMMARY
=========================
Clean events: 17
Failed events: 11
Failure rate: 64.71%
Top suspicious IP: 198.51.100.14 (8 failed attempts)
Off-hours failed attempts: 4
Decision threshold: 3 failed attempts
Recommended action:
- Review events from 198.51.100.14.
- Correlate off-hours failures with endpoint and identity logs.
- Validate whether the account owners recognize these attempts.
Lab-2/Lab-2-Solution/output/capstone_suspicious_ips.csv
+2
View File
@@ -0,0 +1,2 @@
source_ip,failed_attempts
198.51.100.14,8
1 source_ip failed_attempts
2 198.51.100.14 8