DDL events

The DDL (Data Definition Language) Events model tracks a user's DDL events in time and creates a model for the predicted weekly score.

Enable the DDL (Data Definition Language) Events model to track a user's DDL events in time and create a model for the predicted weekly score. If the user's score deviates from the learned one, it is deemed as suspicious behavior and a Sense Event is generated to increase the user's risk score.

Event name

UBA : Increase in DDL events

sensevalue

5

Log source types

Application Security DbProtect, IBM DB2, IBM Guardium, Imperva SecureSphere, Microsoft SQL Server, Oracle Audit Vault, Oracle RDBMS Audit Record, Oracle RDBMS OS Audit Record