Accounts and privileges

UBA : Account or Group or Privileges Added
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Account or Group or Privileges Modified
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : DoS Attack by Account Deletion
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : User Account Created and Deleted in a Short Period of Time
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Dormant Account Used
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Dormant Account Use Attempted
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Expired Account Used
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : First Privilege Escalation
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : New Account Use Detected
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Suspicious Privileged Activity (First Observed Privilege Use)
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : Suspicious Privileged Activity (Rarely Used Privilege)
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : User Attempt to Use Disabled Account
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.
UBA : User Attempt to Use a Suspended Account
The QRadar User Behavior Analytics (UBA) app supports use cases based on rules for certain behavioral anomalies.

Parent topic: Rules and tuning for the UBA app