- Related Products
- ADManager Plus
- ADAudit Plus
- ADSelfService Plus
- Exchange Reporter Plus
- AD360
- Log360
The user analytics data in Incident Workbench incorporates UEBA from the Log360 suite. It's necessary to purchase UEBA to get behaviour analytics and risk score trends of users.
The following data will be available in the user analytics section of the Incident Workbench:
View the Risk Score Trend, Peak Risk Score and the Cards Based Peak Risk Score for insider threat and data exfiltration. Click on the Calendar icon and set the required period.
Other than the risk score analysis, the following messages will be displayed for the specific cases:
The User Activity Overview contains the following widgets:
User Account Management | Tracks create, modify, and delete actions related to the user account. |
Device Severity Events | Consolidates the device severity events for the devices accessed by the user |
Active Sessions Overview | Shows the list of active sessions on different devices and their duration |
Software Installations and Updates | List of softwares installed, uninstalled and updated by the user during the selected period |
Top 5 File Integrity Monitoring Events | Tracks events related to file creation, deletion, modification and access. |
Process Tracking | Tracks process creation and termination activities |
This sections fetches the Active Directory object details such as:
Copyright © 2020, ZOHO Corp. All Rights Reserved.