Elastic low stable eql

Unusual Privilege Type assigned to a User

A machine learning job has identified a user leveraging an uncommon privilege type for privileged operations, indicating potential privileged access activity. This indicates that a user is performing operations requiring elevated privileges but is using a privilege type that is not typically seen in their baseline logs.

View Source

Detection Logic

Field Validations

Loading…

Comments (0)

Loading comments...