UBA Module

General Description

The module provides mechanisms for detecting deviations in the behavior of various types of objects: users, hosts, administrators, information systems, business processes, and more. The universal scoring calculation mechanism allows identifying potential malicious actors, compromised accounts, calculating the cybersecurity index, analyzing operational efficiency and work discipline, and combating fraud.

Examples of Deviations

• the VPN connection time is unusual for the user
• the user connected via VPN from an unusual city or country
• the user launched an extremely rarely used program
• the user sent an unusually large volume of emails