Data Downloaded

The Data Downloaded model monitors data that is downloaded for each user and then alerts on abnormal behavior.

Enable the Data Downloaded machine learning model to display data that is downloaded for each user on the User Details page. When the actual volume of data that is downloaded exceeds the model’s predicted number, a Sense Event is generated to increase the user’s risk score.

Event name

UBA : Abnormal Data Downloaded

sensevalue

5

Required configuration

Custom event property "Bytes Received" must exist for the desired log source type.

Log source types

Pulse Secure Pulse Connect Secure, Fortinet FortiGate Security Gateway, Blue Coat SG Appliance, Juniper SRX Series Services Gateway, Microsoft ISA, Citrix NetScaler