The Identity Threat module provides superior coverage for stealthy identity threat vectors, including compromised accounts and insider threats. The module is available as an add-on and includes the following UI features.
Automated and customizable Asset Role classification based on constant analysis of the users and host in your network. You can edit and manage the User Asset Roles and Host Asset Roles to meet the needs of your organization.
The Behavioral Analytics tab in the Alert Panel view that displays background information for quicker triaging and investigation. This enables you to analyze the deviation that triggered the alert against the backdrop of baseline behavior.
Risk Management dashboard for reviewing the risk posture of the organization and enabling faster decision making. The dashboard contains a number of Metrics widgets that present statistical risk information for your organization.
User Risk View and Host Risk View which provide additional information about the asset, including score trend timeline, notable events, peer comparison, and additional asset-associated alerts and insights for easy uncovering of hidden threats.