Here is an Advanced Analytics dashboard that predicts when employees are planning to leave the company. Multiple signals are used to make the prediction including:
- Visits to career sites
- Visits to competitor job sites
- Uploads of resume data to webmail
- Suspicious data movement from corporate to unsanctioned apps
- Bulk downloads of data to corporate apps
To fill in this dashboard the following config will need to be in place:
1. Policy to alert when visiting (all activities) with destination ‘Job Search/Career’ category
2. Policy to alert when visiting (all activities) with destination a custom web category that includes competitor job sites
3. DLP policy to alert when resume data is uploaded to webmail category (use ML classifier for resume)
4. UEBA policy and config for suspicious data movement (need to identify corporate apps)
5. UEBA policy to detect bulk downloads of data
Thanks to
