Focus

SaaS Security Administrator's Guide

Navigate to Behavior Threats

Table of Contents

Navigate to Behavior Threats

Navigate to the Behavior Threats page to view unusual user activities that might represent threats to your organization from compromised accounts or malicious insiders.

Navigate to the Behavior Threats page to view unusual user activities that might represent threats to your organization from compromised accounts or malicious insiders. Behavior Threats analyzes historical data that it obtains from Data Security. For this reason, you must have Data Security activated on your tenant. If Data Security is not available, the

Behavior Threats

tab will not appear on the SaaS Security page.

Select

Manage

Configuration

SaaS Security

Behavior Threats

The Behavior Threats page displays information about the risky users and incidents that Behavior Threats detected. On this page, you can view the in your environment, a list of all users including each user's risk score, the enabled policies for detecting threat incidents, and a list of all the incidents that Behavior Threats detected. From here, you can navigate to more information, such as user details and the top risky users by policy. You can also disable and enable policies, add users to the watchlist, and view users on the watchlist.

Behavior Threats

Policies for Detecting Threats

SaaS Security Administrator's Guide

Navigate to Behavior Threats

Navigate to Behavior Threats

Recommended For You