User posture

The User posture feature of User Behavior provides a detailed view of a user's behavior within senhasegura. It includes dashboards that display various information, such as the user profile, access behavior, sessions performed, sites accessed, and continuous risk assessment based on the user’s interactions.

Functionalities

The features of the User posture screen are organized into various dashboards that allow for a comprehensive analysis of user behavior. Each dashboard offers a specific perspective, facilitating the visualization of critical data and informed decision-making. Below are the available dashboards:

• User profile: displays general information such as status, photo, name, IP address, and the user’s last access.
• User behavior: presents details about access, such as the period of highest usage, total logins, recording time, and access locations.
• Sessions: provides information about the number of remote sessions performed by the user.
• Sites: shows the distribution of sessions across different locations.
• Assessment evolution: offers a graph showing the evolution of the user’s trust assessment over time.
• Device type: displays sessions by the type of device used.
• Device criticality: groups sessions according to the criticality of the devices.
• Credential criticality: groups sessions by the criticality of the credentials used.
• High-risk sessions: lists sessions considered high-risk with detailed information and links to more data.
• Suspicious events: lists suspicious events that occurred during the user's sessions.

Applicability

User posture is crucial for analyzing and monitoring user behavior in information security environments. It allows for the identification of usage patterns, detection of anomalous behaviors, and tracking of high-risk sessions or suspicious events. This type of analysis is fundamental for ensuring operational security and preventing unauthorized access or credential abuse.

Benefits

The main benefits of using User posture include:

1. Comprehensive view: provides a detailed view of user behavior, helping to identify patterns and potential threats.
2. Continuous monitoring: allows tracking of a user's behavior evolution over time.
3. Rapid response: the ability to view sessions and suspicious events in real time facilitates immediate response to security incidents.
4. Customized analysis: the dashboards can be used to focus on specific aspects of user behavior, such as the types of devices used or credential criticality.
5. Incident prevention: by identifying atypical behaviors or out-of-pattern accesses, it’s possible to act preventively to avoid significant security compromises.