Focus

SaaS Security Administrator's Guide

Add Users of Interest to the Watchlist

Table of Contents

Add Users of Interest to the Watchlist

In Behavior Threats, you can monitor a user more closely by adding them to the watchlist. You can filter the Users table to show only users in the watchlist.

To track a particular user more closely, you can add them to the watchlist in Behavior Threats. For example, if the user appears as one of the Top 3 Risky Users in the Behavior Threats dashboard, you might want to add them to the watchlist to track them more carefully. Or you might want to track users for reasons unrelated to the information that Behavior Threats has logged. For example, if a user has recently tendered their resignation, you might want to add them to the watchlist so you can more easily observe any suspicious download activities. Such activities might indicate an attempt to take proprietary information to their next job.

To view all the users who you added to the watchlist, you can Add Filter to the Users table.

Navigate to the Behavior Threats dashboard.
To add any of the Top 3 Risky Users to the watchlist, complete the following steps:
1. Locate the user in the Top 3 Risky Users or View All Risky Users to locate the user in the Top Risky Users Details.
2. Position the Watchlist toggle for the user to the On position.
To add any user to the watchlist, complete the following steps:
1. Navigate to Users.
2. Locate the user in the list.
3. Position the Watchlist toggle for the user to the On position.

View Threat Details for All Users

View the Users on the Watchlist