View information about the Activity and behaviors risk factor, which highlights irregularities in user and device behavior that could indicate an ongoing under attack.
Operations Dashboard assesses user accounts and devices for
any unusual activity that may indicate a potential threat. If an assessment highlights
events
with a
Highor
Mediumrisk level, the account or device and risk type information displays in the Activity and Behaviors table. The Activity and Behaviors risk factor contributes to the Exposure Index.
When viewing risk events, click the number in the case column to view current cases
involving the specified risk event. Click the options icon (
) to open a new case for the risk event or add the case to an existing risk event.
) to open a new case for the risk event or add the case to an existing risk event.The following table describes the risk indicators associated with the Activity and
behaviors risk factor.
|
Indicator
|
Description
|
Data Sources
|
Target
|
||
|
User activity
|
Abnormal user behavior patterns or preferences
|
|
|
||
|
Device activity
|
Abnormal device behavior patterns or preferences
|
|
|
||
|
Network activity
|
Anomalous or malicious network activity
|
|
|
