Configure Prisma SaaS User Activity Rules

In addition to data patterns, you can add user activity rules for comprehensive coverage. For example, you can create a rule that sends an email alert or creates a log entry when a user downloads a large number of reports, or when a user tries to access an SaaS application from a malicious IP address. Similar to asset rules, user activity rules include a robust set of match criteria that allow you to precisely define which activities to track.
user-activity-rules.png

Related Documentation