View information about the Activity and behaviors risk factor, which highlights irregularities in user and device behavior that could indicate an ongoing under attack.
Operations Dashboard assesses user accounts and devices for any unusual activity that may indicate a potential
threat. If an assessment highlights events with a
Highor
Mediumrisk level, the account or device and risk type information displays in the Activity and Behaviors table. The Activity and Behaviors risk factor contributes to your exposure level.
When viewing risk events, click the number in the case column to view current cases
involving the specified risk event. Click the options icon (
) to open a new case for the risk event or add the case to an existing risk event.
) to open a new case for the risk event or add the case to an existing risk event.The following table describes the risk indicators associated with the Activity and
behaviors risk factor.
|
Indicator
|
Description
|
Data sources
|
Target
|
||
|
User activity
|
Abnormal user behavior patterns or preferences
|
|
|
||
|
Device activity
|
Abnormal device behavior patterns or preferences
|
|
|
||
|
Network activity
|
Anomalous or malicious network activity
|
|
|
