locked
Adding custom alerts RRS feed

  • Question

  • We are looking to replace our manage engine ad logging tool and testing ATA, is there a method in which we can flag users that log in out of hours, I cannot see a direct reporting utility in the console.
    Tuesday, August 23, 2016 10:16 AM

All replies

  • ATA currently does not have such an option. But as soon as a suspicious activity occurs, ATA will ask you this question: "Is this a normal behavior for the account listed below?".

    You can only add exclusions for DNS Reconnaissance and Pass-the-Ticket IP addresses.

    Tuesday, August 23, 2016 2:09 PM