Abnormal has introduced a new Indicators filter in the Anomaly Log to improve clarity and streamline investigations.
- New Indicators filter added, allowing you to categorize anomalies by the indicator type (e.g., Admin Console Activity, High-Risk Sign-In, VPN usage)
- Enables faster triage by narrowing activity based on the type of behavior observed
- Anomaly page adds Indicators filter in addition to existing filters for Date Range, Event Types, Platform
Indicators represent categories of related signals, helping you more easily understand and investigate anomalous activity.