Skip to content
Threat Feed
Subscribe

Tag

User-Behavior

1 brief RSS
high advisory

Detection of Compromised User Activity via Alert Correlation

A detection rule identifies potentially compromised accounts by aggregating multiple high-risk security alerts associated with the same user ID within a four-hour window.

threat-detection user-behavior alert-aggregation compromise-detection
3t