Strange activity for Discovered apps in MCAS

%3CLINGO-SUB%20id%3D%22lingo-sub-2320186%22%20slang%3D%22en-US%22%3EStrange%20activity%20for%20Discovered%20apps%20in%20MCAS%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2320186%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%3CP%3Ewe%20are%20seeing%20some%20strange%20activity%20through%20MCAS%20on%20applications%20that%20users%20confirmed%20they%20have%20not%20logged%20into%20using%20company%20devices.%26nbsp%3B%3C%2FP%3E%3CP%3ESnapChat%20is%20showing%20as%20having%20a%20peak%20of%20transactions%2Fuploads%20on%20a%20specific%20day%20for%20several%20users%20(2%20incidents%20attached)%20but%20both%20confirm%20they%20have%20not%20used%20the%20application%20-%20especially%20as%20the%20time%20frame%20appears%20to%20late%20on%20a%20Friday%20night.%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20generating%20this%20traffic%3F%20It%20is%20concerning%20MCAS%20can%20be%20so%20far%20off%20the%20mark%20and%20definitely%20leads%20to%20trust%2Fintegrity%20issues%20with%20the%20data!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2320186%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Visitor

Hi, 

we are seeing some strange activity through MCAS on applications that users confirmed they have not logged into using company devices. 

SnapChat is showing as having a peak of transactions/uploads on a specific day for several users (2 incidents attached) but both confirm they have not used the application - especially as the time frame appears to late on a Friday night. 

What is generating this traffic? It is concerning MCAS can be so far off the mark and definitely leads to trust/integrity issues with the data! 

0 Replies