INDICATORS OF COMPROMISE OF ACCESS

A method of prioritizing and handling events in a network, including receiving notification of an event, identifying an account that triggered the event, determining a group to which the account belongs, determining a blast radius for each account in the group and for the group, wherein the blast ra...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: RAVEH, Liron, NEYSTADT, John Eugene
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:A method of prioritizing and handling events in a network, including receiving notification of an event, identifying an account that triggered the event, determining a group to which the account belongs, determining a blast radius for each account in the group and for the group, wherein the blast radius represents an exposure level of the group's accounts to data in the network relative to other accounts in the network, applying rules to prioritize handling of the events taking into consideration the group and blast radius.