Why monitoring detects threats early in Cybersecurity - See It in Action

Why Monitoring Detects Threats Early

📖 Scenario: You work in a cybersecurity team. Your job is to watch computer logs to find signs of trouble early. This helps stop bad things before they cause damage.

🎯 Goal: Build a simple program that shows how monitoring logs can detect threats early by checking for suspicious activities.

📋 What You'll Learn

Create a dictionary called logs with exact entries showing user actions and their status

Add a variable called threat_threshold set to 3

Use a for loop with variables user and failures to find users with failed attempts above the threshold

Print the list of users detected as threats

💡 Why This Matters

🌍 Real World

Monitoring logs is like watching security cameras. It helps catch problems early before they get worse.

💼 Career

Cybersecurity professionals use monitoring tools daily to protect systems from attacks by spotting unusual behavior quickly.

1

Create the initial logs data

Create a dictionary called logs with these exact entries: 'alice': 1, 'bob': 4, 'carol': 2, 'dave': 5

Cybersecurity

# Create the logs dictionary with user failed attempts
# Your code here

Need a hint?

Use curly braces to create a dictionary with user names as keys and numbers as values.

2

Add the threat detection threshold

Add a variable called threat_threshold and set it to 3

Cybersecurity

logs = {'alice': 1, 'bob': 4, 'carol': 2, 'dave': 5}
# Set the threat detection threshold
# Your code here

Need a hint?

Just create a variable and assign the number 3 to it.

3

Detect users exceeding the threshold

Use a for loop with variables user and failures to check logs.items(). Add users with failures greater than threat_threshold to a list called detected_threats

Cybersecurity

logs = {'alice': 1, 'bob': 4, 'carol': 2, 'dave': 5}
threat_threshold = 3
# Create an empty list for detected threats
# Use a for loop to find users with failures above threshold
# Your code here

Need a hint?

Start with an empty list. Loop through the dictionary items. Use an if statement to compare failures with the threshold.

4

Print the detected threats

Write a print statement to display the detected_threats list

Cybersecurity

logs = {'alice': 1, 'bob': 4, 'carol': 2, 'dave': 5}
threat_threshold = 3
detected_threats = []
for user, failures in logs.items():
    if failures > threat_threshold:
        detected_threats.append(user)
# Print the detected threats list
# Your code here

Need a hint?

Use print() to show the list of users detected as threats.