Automatic identification of critical network assets of a private computer network

A computer-implemented method comprising:

• receiving a plurality of log entries from a log of a private computer network;
• extracting, from the log entries, particular log entries that indicate access to a target account of a service provided on the private computer network;
• aggregating the particular log entries to generate a histogram of accesses to the target account;
• inputting the histogram to a machine learning model to determine whether or not the target account is an administrator account of the service;
• and
• determining that the target account is the administrator account of the service based on a prediction from the machine learning model.

A computer system comprising a memory and a processor, the memory including instructions that when executed by the processor causes the computer system to:

• receive a plurality of log entries from a log of a private computer network;
• extract, from the log entries, particular log entries that indicate access to a target asset of the private computer network;
• aggregate the particular log entries to generate a histogram of accesses to the target asset;
• input the histogram to a machine learning model;
• and
• receive a prediction from the machine learning model, the prediction indicating a likelihood that the target asset is a critical asset that is more important than other assets of a same type as the target asset.