UBA : MaaS360 URL access blocked

The QRadar® User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.

UBA : MaaS360 URL access blocked

Enabled by default

False

Default senseValue

10

Description

Detects MaaS360 event indicating a user's access to a URL has been blocked.

Required configuration

IBM MaaS360 Security DSM and events.

Support rule

BB:UBA : Common Event Filters

Log source types

IBM MaaS360 Security (Event ID: BLOCKED_URL_ACCESS with Event Category : COMPLIANCE)