Forum Discussion
Yossi Basha
Microsoft
MicrosoftInvestigating identity threats in hybrid on prem and cloud environments
We are very happy to announce the new identity threat investigation experiance. Which is the integraiton of Azure ATP, Azure AD identity protection and MCAS - you can now get the security value of t...
Very well put together.
Reading thru the documentation here.
https://docs.microsoft.com/en-us/cloud-app-security/tutorial-ueba
I was curious if there is anymore information that describes how the priority score is created?
"Use the Investigation priority score to determine which users to investigate first. Cloud App Security builds user profiles for each user based on analytics that take time, peer groups, and expected user activity into consideration. Activity that is anomalous to a user's baseline is evaluated and scored. "