📰 Release Notes (v1.0.0)

Initial stable release of Behaviour Analytics for Moodle.

This version includes:

• ✅ Four behaviour detectors:

  • Failed logins – detects consecutive failed login attempts (possible brute-force).
  • Activity burst – flags excessive actions within short time windows.
  • Unusual login time – identifies users active during atypical hours.
  • IP velocity – detects impossible travel between login IPs.

• ⚙️ Configurable scoring system Combine detectors using weighted mean, maximum risk, or cumulative capped sum.

• 🚨 Automatic mitigation actions

  • Suspend user
  • Kill all active sessions
  • Inform administrators (with duplicate-notification prevention)

• 📊 Administrator reports

  • Global overview of user risk scores
  • Detailed per-user breakdown of detector findings

• 🔒 Privacy-compliant design

  • Uses Moodle’s privacy API
  • Excludes guest and webservice accounts
  • Stores only aggregated risk profiles (no raw logs)

• 🧪 Comprehensive test suite Full PHPUnit coverage for detectors, scoring, registry, and actions.