Abstract: According to examples, an apparatus may include a processor may identify features in a plurality of data items, determine similarities and/or patterns in the identified features, and group the plurality of data items into a plurality of clusters of data items based on the determined similarities and/or patterns in the identified features in the plurality of data items. The processor may also evaluate the plurality of clusters to identify a potentially malicious pattern among the data items in the plurality of clusters. In addition, the processor may, based on a potentially malicious pattern being identified in a generated cluster of the generated clusters, execute an action with regard to the data items in the generated cluster.
Type:
Application
Filed:
March 30, 2021
Publication date:
October 6, 2022
Applicant:
Microsoft Technololgy Licensing, LLC
Inventors:
Abhijeet Surendra HATEKAR, Jonathan Ray ARMER