Diving into UEBA systems that large corporations use to protect themselves from cyber attacks, espionage, noncompliance, fraud, 'insider' threats and other risks ...I feel like this is a kind of totalitarian surveillance hellscape we'd never accept in any other area of life.
"A Watch List is used to monitor entities ...that are considered problematic or require special attention"
"...users who have received a poor performance review can be placed on a Watch List so that their activity can be closely monitored" #cybersecurity
documentation.securonix.com/onlinedoc/Cont…
"...users who have received a poor performance review can be placed on a Watch List so that their activity can be closely monitored" #cybersecurity
documentation.securonix.com/onlinedoc/Cont…
An "abnormal number of logon failures", a "rare domain visited" or "flight risk behavior on web browsing to multiple job sites in a short period of time" ...put this employee on the Watch List #cybersecurity
In 'Spotter'. The product is called "SNIPR".
(p378)
In 'Spotter'. The product is called "SNIPR".
(p378)
Currently going through security/SIEM/UEBA systems by IBM, Microsoft and Forcepoint, each of them consisting of dozens of products, and there's thousands of pages of docs available, uhm.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
