Rule sensitivity management for UEBA 6.0.0 release
Rule sensitivity management provides administrators with greater control over how rules contribute to entity behavior analysis by introducing configurable sense source and Sense Destination scores.
Overview
The Sense Destination scores allow security teams to fine-tune rule sensitivity, helping prioritize activity that is more relevant to their environment and improving the accuracy of behavioral analytics.
By extending the existing scoring framework, administrators can better align rule behavior with organizational risk and monitoring objectives.
Key benefits
Rule sensitivity management provides the following benefits:
- Fine-tune rule sensitivity based on organizational requirements.
- Improve behavioral analysis by adjusting source and destination entity significance.
- Quickly identify and prioritize high-impact rules.
- Maintain consistent rule management through an interface aligned with existing risk score controls.
- Simplify administration with built-in filtering, sorting, and reset capabilities.
