Addressing insider risks in an increasingly complex data landscape

Hi TalhahMir  

great content but just curious on where we can find more detailed info on “Test” cases please? Specifically regarding being able to generate User Activity like the Sequence Detection and the Cumulative exfiltration detection?

When chatting to customers here in ANZ there is a very real appetite to have the tech “proven” in a PoC, to the point that we’d like to be able to deploy with a “Test” user, site/content & a very tight policy to *prove* the telemetry works “as advertised” and then be able to delete the test policy afterwards to leave the system working as designed.

Would love to know where we can find more info, or someone to chat to about these specific areas & test cases in general please.

Regards,
Dave C