User Behavior Rules Management

User behavior rules are used to detect anomalies in users’ behavior, and to notify investigators about them.

Notifications on detected anomalies in users’ behavior can be received by email.

Monitored sessions containing user behavior anomalies also have a special risk score associated with them which is displayed in the Session List.