Risk Posture

The Risk Posture model tracks a user’s risky activity by the rate of sense events generated and creates a baseline model.

Enable the Risk Posture model to display the user's risk score deviation on the User Details page. If the user’s risky activity deviates from the baseline, it is deemed suspicious and a sense event is generated to increase the user’s overall risk score.

Event name

UBA : Deviation from normal Risk posture

sensevalue

5

Required configuration

UBA is configured and sense events are being created.

Log source types

Any log sources with events that trigger sense events.