UBA : MaaS360 device out of compliance due to device being rooted

The QRadar® User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.

UBA : MaaS360 device out of compliance due to device being rooted

Enabled by default

False

Default senseValue

5

Description

Device is not compliant because it was jailbroken or rooted to bypass OS restrictions.

Required configuration

IBM MaaS360 Security DSM and events.

Support rule

BB:UBA : Common Event Filters

Log source types

IBM MaaS360 Security ((Event ID: DEVICE_ROOTED with Event Category : COMPLIANCE)