Understanding the UBA dashboard
The UBA app displays users and their corresponding risk scores. You can configure the type of users that you would like to monitor. It could be a group of users based on factors such as department, employees on notice period, and employees working for a specific customer across departments. The classification of users is possible when we have enough data on users. This data is usually imported when we integrate with the directory server of the organization.
Figure 8.2 – UBA dashboard
In the preceding figure, we see that there are 68 monitored users, out of which 50 users were imported from the directory server. UBA is capable of discovering new users based on the events that it consumes. We previously discussed that the other way to add users is by importing from reference data. In Figure 8.2, however, we have not imported any users from reference data.
Along with the users, there are corresponding risk scores...
