Interview Guides
You are building an ML system for a security product that flags suspicious login activity and possible account takeover attempts. The system needs to score login events in near real time and help downstream enforcement decide whether to allow, challenge, or block access.
What features would you engineer to detect anomalous login behaviors or account takeover attempts?
