behavioral-analytics

What problem does it solve?

This Skill identifies suspicious user and entity behavior that could indicate insider threats or account takeovers, which are often missed by traditional security tools.

Core Features & Use Cases

• Behavioral Baselining: Establishes normal activity patterns for users, service accounts, and systems.
• Anomaly Detection: Flags deviations from established baselines across various dimensions like login times, locations, and data volumes.
• Risk Scoring: Computes a composite risk score for entities to prioritize investigations.
• Pattern Recognition: Identifies known insider threat and account takeover patterns.
• Use Case: A user who normally logs in from the US and accesses finance reports suddenly logs in from a new country and attempts to download a large volume of sensitive data. This Skill would flag this as a high-risk event.

Quick Start

Analyze the provided behavioral event data to compute an entity risk score.