UBA : Non-Standard User Accessing AWS Resources
The QRadar® User Entity Behavior Analytics (UEBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Non-Standard User Accessing AWS Resources
Enabled by default
False
Default senseValue
10
Description
Detects a non-standard user who is attempting to access Amazon Web Services (AWS) resources.
Support rules
- BB:UBA : Common Event Filters
- AWS Cloud: S3 Bucket accessed by Non-Standard User
Log source types
Amazon Web Services Extension