Behavior Analysis
Behavior Analysis
KB_2018072714
CyberQuest™
Behavior analysis
- CyberQuest analyzes the behavior of IPs and users from multiple perspectives
- At the time of identifying a new endpoint as a traffic partner (for users and also for IPs), it is added to the IP / user profile, thus generating new information in CyberQuest vis-à-vis the metadata of the objects being tracked
- Assets
- Source IPs, Destination IPs
- Applications
- Traffic figures are calculated and added to these tracked items and traffic information is recorded daily from audit information on EvendIDs 63805, 63809, 63900 and / or the information on the _network.bytes sub-object.