Insider Threat detection and Prediction

Working on CMU insider Threat datast version 6.2. Unable to find similar workflow . Dataset comprises of 8 csv files structure is as follows

| File Name                                                                   | Headers                                                                                                     |
| decoy_file                                                                  | decoy_file, pc                                                                                              |
| device.csv                                                                  | id, date, user, pc, file_tree, activity                                                                     |
| email.csv                                                                   | id, date, user, pc, to, cc, bcc, from, activity, size, attachment, content                                  |
| file.csv                                                                    | id, date, user, pc, filename, activity, to removable media, from removable media content                    |
| logon.csv                                                                   | id, date, user, PC, activity                                                                                |
| LDAP.csv                                                                    | employee name, user_id, email, role, projects, business_unit, functional_unit, department, team, supervisor |
| http.csv                                                                    | id, date, user, pc, url, activity, content                                                                  |
| pschrometic.csv                                                             | employe_name, user_id, O, C, E, A, N                                                                        |
| Request help in formulating the workflow for prediction of a malicious user |                                                                                                             |