Potential Flight Risk Staging

Description

This threat is generated when a potential flight risk user has staged data but not yet exfiltrated it.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat

Category

Insider Threat, Data Exfiltration

Alert Volume

Low (?)

SPL Difficulty

None

Journey

Stage 4

Data Sources

Audit Trail
Host-based IDS
Network Communication
Anti-Virus or Anti-Malware
IDS or IPS
DLP
Email
Web Proxy