Multiple failed badge attempts and unusual badge access time

Description

This threat is a simple rule to look for unusual badge access time as well as multiple failed badge accesses. UBA has the ability to create simple correlation threat rules based on anomalies. This threat is one such rule.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat

Category

Insider Threat

Alert Volume

Low (?)

SPL Difficulty

None

Journey

Stage 4

Data Sources

Physical Security