release-ad-v2.3

Example of an anomaly detection function that analyzes SSH authentication attempts using machine learning and rule-based validation.

The system monitors SSH authentication logs (auth.log) and GPS location, and uses an Decison Tree algorithm combined with rule-based validation to detect suspicious activities. The detection function is offloaded for execution, while automated responses are handled locally by a Response Daemon.