liveBook · Manning

K-means++ initialization

As explained in Cyber Threat Hunting

K-means++ is an initialization method that selects well-spaced initial centroids for the k-means algorithm.

K-means++ is an initialization method for k-means that selects well-spaced starting centroids. It is one of several k-means variations to consider when choosing a clustering approach for a problem. section 8.8

Choose clustering algorithms according to the problem, and try more than one when exploring data. Careful data processing and parameter tuning remain important because clustering can assign data points incorrectly. section 8.8

How Cyber Threat Hunting covers it

How deep it goes
Mentions k-means++ only as a variation and defers its mechanics to further study.
Examples
Provides no worked k-means++ example or implementation.
What you can do after
Evaluate/understand k-means++ as one candidate among clustering algorithms for an ML-driven threat-hunting problem.
How it connects
Connects k-means++ with k-means, K-Modes, K-Prototypes, K-Medoids, X-Means, G-Means, DBSCAN, and OPTICS.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Cyber Threat Hunting. The section links point to the parts of the book it draws on.