Abstract
The article describes the main provisions of the proposed method of identifying abnormal behavior of data center users, which uses machine learning models. Issues related to the formation of a feature space for machine learning models, software implementation, and experimental evaluation of the proposed method are considered.