Detect security risks and identify anomalies by correlating signals across different sources.
Designed to empower you with enhanced detection capabilities, Correlated Intelligence
correlates suspicious signals from various sources to detect security risks and
anomalies.
 |
NoteCurrently, Correlated Intelligence collects signals from Advance Spam Protection,
Malware Scanning, and Web Reputation.
|
One key advantage of Correlated Intelligence is its capability to see and analyze
signals
from multiple sources to identify security risks that may go unnoticed by a single
security filter. This multi-source approach adds an extra layer of protection to detect
potential threats.
Another highlight of Correlated Intelligence is its ability to alert you of anomalies,
which shows one or multiple signals that deviate from normal behaviors. Anomalies
may
not necessarily indicate a security risk, but are unusual enough to warrant attention.
With this feature, you can have a more comprehensive view of your security
landscape.
Correlated Intelligence operates by first gathering signals from various security
filters
and then matching the signals against a set of expert-defined rules. The aim of this
process is to identify any matches that could indicate a security risk or anomaly,
providing a more thorough and nuanced analysis of potential security threats.
|
NoteCorrelated Intelligence is currently available for Exchange Online.
Anomaly detection will be available soon.
|