ThreatResponder® User Behavior Analytics (UBA)

What are your vetted users and trusted partners doing on your network? What data are your employees sending to their personal email accounts or copying to their USB devices before they tender their resignation notices?

With ThreatResponder® agent (“rover”) deployed at every endpoint, we have the capability to capture all the evidence needed for internal, civil, or criminal investigation. When triggered and upon management approval, the UBA engine captures the raw evidence including video screenshot or screen captures, web activities, and listings of files that were accessed, modified, and/or created. ThreatResponder® UBA capabilities include:

  • File or document access
  • Real-time and event-triggered monitoring
  • Web and social media activities
  • Network activities
  • Playback of the captured activities