How SpotMon works

1. Establish normal baseline & tolerance levels

• Establish the right tolerance levels for your business
• Apply different tolerances to different user cohorts (e.g. Developer vs. Admin)

2. Monitor & identify potential suspicious user activity

• Real-time alerts for highly unusual or suspicious activities
• Daily summaries and comprehensive reporting over-time to identify trends or patterns
• Add suspicious users to Watchlist and closely monitor
• Look into specific user activities over time, helping identify patterns or confirm whether a data breach or policy violation occurred.

3. Investigate & inform action

• Drill down into specific user actions, review timestamps, and cross-reference with other user activities or logs
• Pinpoint the exact nature of suspicious activities
• Better understand their intent and determine if further action is needed