Behavior Profiles

Behavior profiles allow you to measure normal conditions so that abnormalities can be identified when they occur. Analysis of massive amounts of data about your workforce, computers, servers, networking equipment, and so forth can reveal a pattern of normal activity, or baseline. By comparing activity to this baseline, alerts can be triggered when an aberration, or outlier, is identified. The following images shows an example of a behavior profile. Behavior profiles show the pattern of normal behavior for an entity. In the example, the behavior profile includes the baseline for the entity (5) and a sudden deviation identified as an outlier (26). The following image shows an example of a behavior profile on the Violation Summary screen of the Security Command Center. The violation details show the baseline of normal behavior and the deviation that triggered the violation. "Baselining" (generating a behavior baseline for the profile) requires time to normalize anomalies. Unified Defense

, function (e) { // Prevent Chrome 76 and later from showing the mini-infobar e.preventDefault(); // Stash the event so it can be triggered later. window[

related reading

• Securonix Documentationdocumentation.securonix.com
• Securonix Documentationdocumentation.securonix.com
• Securonix Documentationdocumentation.securonix.com
• Securonix Documentationdocumentation.securonix.com
• Baseline Hunting with the PEAK Framework | Splunksplunk.com
• Use customizable anomalies to detect threats in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• Securonix Documentationdocumentation.securonix.com
• Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learnlearn.microsoft.com
• Agent behavioragentbehavior.dev
• Securonix Documentationdocumentation.securonix.com
• Get to Know a User Profile | Exabeam Documentation Portaldocs.exabeam.com
• Advanced threat detection with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com