Aggregated Activity

The Aggregated Activity model tracks a user’s general activity by time and creates a model for the predicted weekly behavior patterns.

Enable the Aggregated Activity machine learning model to display the user’s general activity by time on the User Details page. If the user’s activity deviates from the learned behavior, it is deemed suspicious and a Sense Event is generated to increase the user’s risk score.

Event name

UBA : Abnormal increase in User activity

sensevalue

5

Log source types

Any log source with events that provide a username.