An employee who often travels abroad logs in from a first-seen country during non-working hours. The SIEM tool generates an alert that the user is forwarding an increased amount of emails to an external mail domain and then logs out. The investigation concludes that the external domain belongs to a competitor. Which two behaviors triggered UEBA? (Choose two.)
A. domain belongs to a competitor
B. log in during non-working hours
C. email forwarding to an external domain
D. log in from a first-seen country
E. increased number of sent mails
An employee who often travels abroad logs in from a first-seen country during non-working hours. The SIEM tool generates
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
An employee who often travels abroad logs in from a first-seen country during non-working hours. The SIEM tool generates
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!