Security Alerts
Security Alerting
Giving the users visibility into where and how their data is being shared is a huge value add to large enterprise clients with millions of pieces of data to protect. Giving the ability to be alerted on one type of behavior or a series of behaviors so that a user may be blocked or the ability to shut down access to the data.
Examples of alert types:
Unusual File Download Pattern: 50 documents (totaling 130 MB) downloaded in a short period of time, indicating an abnormality in download behavior for this user.
Unusual High Velocity Data Access Pattern: 100 documents accessed in a short period of time, indicating an abnormality in access behavior for this user. This included 50 documents from the previous alert corresponding to this user.
Unusual Location-Based Access: 3 documents accessed in a short period of time from two different geographic locations, indicating an abnormality in access behavior for this user.
Unusual Data Sharing: 16 documents from sales were accessed indicating an abnormality in data sharing behavior between that organization and this user. 3 of which were involved in another potentially related alert.
Unusual File Upload: 150 documents / 390 MB were uploaded indicating an abnormality in data upload behavior for this user.