Threats

Threat	Severity	Description
Account Takeover	Critical	The account takeover threat is triggered when an attacker successfully accesses an account.
Session Sharing	Critical	The session sharing threat is triggered when multiple users share the same session to access an account authorized for a single user.
Brute Force	High	The brute force threat is triggered when a high number of anomalous login attempts are detected for a specific account.
Credential Stuffing	High	The credential stuffing threat is triggered when an attacker is attempting to log into a large number of accounts.
MFA Location Mismatch	High	The MFA location mismatch threat is triggered when the starting location and completing location for an MFA attempt are not in the same location.
MFA Fatigue	High	The MFA fatigue threat is triggered when an anomalously high number of MFA requests are sent for a specific account.
Breached since Password Reset	Medium	The account's credentials appeared in a known breach after the last recorded password reset, increasing the risk of unauthorized access.

Unusual Activity

Insight	Description
Circadian Rhythm	Tracks activity over a 24-hour period.
Country Distribution	Tracks the total number of unique countries from which activity was seen on a given day.
Device Type	Tracks activity for a specific device type on a given day.
Event Risk Score	Tracks the average riskiness of events in a workspace on a given day.
Event Type	Tracks activity for a specific event type on a given day.
Geolocation	Tracks activity for a specific country on a given day.
Risk Signals	Tracks activity for a specific risk signal on a given day.
Total Events	Tracks total activity for a workspace on a given day.
Unique Accounts	Tracks the total number of unique accounts seen in a workspace on a given day.
Unique ASNs	Tracks the total number of unique ASNs seen in a workspace on a given day.
Unique ASOs	Tracks the total number of unique ASOs seen in a workspace on a given day.
Unique Emails	Tracks the total number of unique emails seen in a workspace on a given day.
Unique IPs	Tracks the total number of unique IPs seen in a workspace on a given day.
Unique Prints	Tracks the total number of unique SignalPrints seen in a workspace on a given day.