Exfiltration after Suspicious Internal Activity
Description
This threat is generated when an account (or multiple accounts) exhibit behavior outside of the normal baseline. It further differentiates itself by including data exfiltration associated with that account.
Content Mapping
This content is not mapped to any local saved search. Add mapping