
close
close
Anomaly detection alert of suspicious administrator activity. – via Microsoft
Policies are grouped into two categories Activity Policy and Anomaly Detection Policy. Activity Policies are simply alerts to important activities such as administrator activity from a new IP address, mass data downloads, new IP used to access corporate data, and more. Alerts can be sent via email or text message depending on their severity. Alerts can be used to understand behavior that is not malicious but also not routine. Activity Policies help admins understand resource misuse not necessarily malicious behavior. Your users could be using data in ways which puts stress on your network when there are better ways to get the job done.
Anomaly Detection Policies are more focused on strange behavior that could signal malicious behavior. For example, this could be a brute force login attempt, or distant geographic logins close together in time. Additionally, Anomaly Detection Policies can be configured to keep an eye on behavior outside your network to better understand the current state of activity. Automatic rules can be set up to suspend accounts depending on their risk score. Each alert is given a score which is calculated using over 70 different metrics.
advertisment
Activity policy being created from an out-of-the-box template. – via Microsoft
More from Joseph Finney
advertisment
Petri Newsletters
Whether it’s Security or Cloud Computing, we have the know-how for you. Sign up for our newsletters here.
advertisment
More in Office 365
Microsoft Defender for Office 365 Gets Differentiated Protection for Priority Accounts
Apr 14, 2022 | Rabia Noureen
Microsoft's Surface Hub 2 Smart Camera Arrives to Help with Hybrid Work
Mar 16, 2022 | Rabia Noureen
Microsoft’s New Office.com UI Now Available for All Business and Education Customers
Mar 11, 2022 | Rabia Noureen
Most popular on petri
Log in to save content to your profile.
Article saved!
Access saved content from your profile page. View Saved
Join The Conversation
Create a free account today to participate in forum conversations, comment on posts and more.
Copyright ©2019 BWW Media Group