Elastic low stable eql
Unusual Privilege Type assigned to a User
A machine learning job has identified a user leveraging an uncommon privilege type for privileged operations, indicating potential privileged access activity. This indicates that a user is performing operations requiring elevated privileges but is using a privilege type that is not typically seen in their baseline logs.
Detection Logic
Field Validations
Loading…
Comments (0)
Loading comments...