Varonis Explained - Alerting on Suspicious Behaviour

Varonis DatAlert is a powerful alerting system designed to provide meaningful and valuable alerts without overwhelming users. By utilising user behaviour analytics, it builds profiles on individual users, allowing it to detect unusual activity and alert organisations in near real-time. The system includes customisable alert rules, enabling businesses to focus on critical security events and set up automatic responses to swiftly address potential threats. The alert dashboard offers various panels that display a summary of alerts over time, highlighting top users or devices of concern, with useful filters to prioritise high-severity alerts.

The dashboard also allows users to dive deeper into individual alerts, providing detailed information on the type of account involved, the data accessed, and whether it was sensitive. Varonis enriches these alerts with additional context, helping reduce investigation times and allowing organisations to prioritise the most pressing issues. With predefined rules for common suspicious behaviours and the ability to create custom rules, DatAlert offers flexibility in monitoring. It can deliver alerts through multiple channels, including email, SIEM systems, or even triggering automated scripts to handle incidents efficiently.