Find records by the data you have
Every record names the telemetry it needs. If you know which logs you collect, this is the faster way in.
17 data sources
- How Risk Scores Are BuiltExplainer
- Tuning a UEBA DeploymentProcedure
- Alert Volume and Review CapacityProcedure
- How to Investigate a Risk ScoreProcedure
- Base Rates: The Arithmetic Nobody ShowsAnalysis
- Model Drift and RetrainingProcedure
- Bias in Behavioural ModelsAnalysis
- Explainability and Defensible FindingsReference
- Governance: Who Watches the WatchersReference
- Fitting UEBA Into an Existing SOCProcedure
- Log Normalisation and SchemasProcedure
- Data Failures That Break ModelsReference
- Time: The Quiet KillerReference
- How to Investigate a Risk ScoreProcedure
- Model Drift and RetrainingProcedure
- Running a UEBA Proof of ConceptChecklist
- Data Minimisation in MonitoringProcedure
- Building Behavioural Analytics In-HouseAnalysis
- Testing Detection With Red TeamsProcedure
- What UEBA Actually IsExplainer
- Entities: Beyond Modelling Only UsersExplainer
- Peer Grouping and Where It FailsExplainer
- Data Sources for UEBA, RankedReference
- Entity Resolution in PracticeProcedure
- Enrichment That Makes Scores UsableProcedure
- Cold Start: Entities With No HistoryProcedure
- UEBA for Small TeamsChecklist
- Modelling Privileged UsersProcedure