Albert works in a Healthcare organization. He browses news sites from his corporate computer. One day, he inadvertently clicks a malicious URL that injects the spyware script in his browser. The script starts accessing numerous sensitive applications and downloading the data.
ArcSight Intelligence identifies a sudden increase in the number of access attempts and network lateral movements from Albert’s system. ArcSight Intelligence classifies this as high risk and shares his risk score, and Privileged Account Manager blocks Albert from accessing any application.