LP_Possible Lateral Movement: Triggered when the UEBA module detects any activity related to Lateral Movement with the risk score defined in the UEBA Board.
LP_Possible Internal Recon: Triggered when the UEBA module detects any activity related to Internal Recon with the risk score defined in the UEBA Board.
LP_Possible Infected Host: Triggered when the UEBA module detects any activity related to Infected Host with the risk score defined in the UEBA Board.
LP_Possible Data Exfiltration: Triggered when the UEBA module detects any activity related to Data Exfiltration with the risk score defined in the UEBA Board.
LP_Possible Compromised Account: Triggered when the UEBA module detects any activity related to Compromised Account with the risk score defined in the UEBA Board.
LP_Possible Account Misuse: Triggered when the UEBA module detects any activity related to Account Misuse with the risk score defined in the UEBA Board.
UEBA Analytics Alerts¶
Note
Refer to the Defining the Risk Score to Prepare Anomalies for Alerts section for details on changing the value of the risk score.