Behavior Analytics

📰 Release Notes (v1.0.0)

Initial stable release of Behaviour Analytics for Moodle.

This version includes:

• 
  

  " Four behaviour detectors:

  
  
  
  
  • Failed logins – detects consecutive failed login attempts (possible brute-force).
  
  
  • Activity burst – flags excessive actions within short time windows.
  
  
  • Unusual login time – identifies users active during atypical hours.
  
  
  • IP velocity – detects impossible travel between login IPs.
  
  
  
  


• 
  

  ⚙️ Configurable scoring system
  Combine detectors using weighted mean, maximum risk, or cumulative capped sum.

  
  


• 
  

  🚨 Automatic mitigation actions

  
  
  
  
  • Suspend user
  
  
  • Kill all active sessions
  
  
  • Inform administrators (with duplicate-notification prevention)
  
  
  
  


• 
  

  📊 Administrator reports

  
  
  
  
  • Global overview of user risk scores
  
  
  • Detailed per-user breakdown of detector findings
  
  
  
  


• 
  

  ' Privacy-compliant design

  
  
  
  
  • Uses Moodle’s privacy API
  
  
  • Excludes guest and webservice accounts
  
  
  • Stores only aggregated risk profiles (no raw logs)
  
  
  
  


• 
  

  🧪 Comprehensive test suite
  Full PHPUnit coverage for detectors, scoring, registry, and actions.