Successful Access and Authentication Activity
The Successful Access and Authentication Activity model tracks a user's successful authentication and access events by time and creates a model for the predicted weekly behavior patterns.
Enable the Successful Access and Authentication Activity model to track a user's successful authentication and access events by time and create a model for the predicted weekly behavior patterns. If the user's activity deviates from the learned behavior, it is deemed suspicious and a Sense Event is generated to increase the user's risk score.
Event name
UBA : Increase in successful access and authentication
sensevalue
5
Required configuration
You must define the following properties:
- Bytes Sent
- URL
Log source types
Log sources associated to the high-level category Access and high-level category Authentication.