UEBA : User Account Created and Deleted in a Short Period of Time
The QRadar® User Entity Behavior Analytics (UEBA) app supports use cases based on rules for certain behavioral anomalies.
UEBA : User Account Created and Deleted in a Short Period of Time
Enabled by default
False
Default senseValue
15
Default senseValueSource
15
Description
Detects when an user account is created and deleted in a short period of time.
Support rules
- BB:UBA : User Account Created
- BB:UBA : User Account Deleted
- BB:UBA : Common Event Filters