UBA : User Account Created and Deleted in a Short Period of Time
The QRadar® User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : User Account Created and Deleted in a Short Period of Time
Enabled by default
False
Default senseValue
15
Description
Detects when an user account is created and deleted in a short period of time.
Support rules
- BB:UBA : User Account Created
- BB:UBA : User Account Deleted
- BB:UBA : Common Event Filters