Suspicious Account Activity
This anomaly contains multiple detection methods that look at account events for suspcious activity (e.g., activity by an expired user). Check the associated detection methods for an exhaustive list of what triggers this anomaly.
This content is not mapped to any local saved search. Add mapping