1) I have read that ArcSight ESM can track a user's sessions . Is there a feature like that in Mcafee SIEM. My question is if it is possible to track all activities of a user on a report on a certain period of time.
2) Another question is that is it possible to track user's actions that is out of a baseline. Let's say that a user does certain activities and if user acts differently out of his baseline can Mcafee SIEM creates a notification?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.