☰
Navigation :

Excessive Data Printed

Description

This is a subset of the Unusual Printer Usage anomaly that looks only at number of print jobs, increased number of print jobs, or volume of data printed. It's based on individual user baseline as well as the enterprise average.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat

Category

Insider Threat, Data Exfiltration

Alert Volume

Low (?)

SPL Difficulty

None

Journey

Stage 3

MITRE ATT&CK Tactics

Exfiltration

MITRE ATT&CK Techniques

Exfiltration Over Physical Medium

Data Sources

DLP
Application Data