About
When attackers compromise email credentials, the possibilities are endless. If left undetected, attackers can use compromised accounts to exfiltrate sensitive data or send lateral phishing emails.
By understanding normal behavior, the Abnormal Email Account Takeover Protection add-on module can detect any deviations in these baselines to uncover potentially compromised accounts and then immediately remediate them. Abnormal protects your end users and their information, no matter how account credentials were stolen.
This product is intended for
- Cyber Security Specialist
- Chief Information Security Officer
- Cyber Security Analyst
- Data Security Manager
- Chief Information Officer
- Director Security Operations
Media
Products media viewer
-
Abnormal Account Takeover Protection
See how Abnormal detects account takeovers with a solution that deeply understands and baselines normal user behavior. By understanding normal behavior, Abnormal can discover any deviations in these baselines to uncover potentially compromised accounts and then immediately remediate them.
-
Explainable Attack Analysis
This analysis enables SOC analysts to understand why an account was judged as compromised. You will see the evidence based on monitored relevant signals and an event log of unusual events, such as suspicious logins, mail rule changes, or abnormal communication patterns.
-
Automatic Account Remediation
Abnormal's automatic account remediation stops attackers in their tracks by signing users out of active sessions, instantly disabling accounts, triggering Microsoft 365 and SSO password resets, and creating service tickets.
-
Baseline Good Behavior
Abnormal deeply understands and baselines normal behavior for every end user by analyzing signals including login frequency, locations, devices, operating systems, browsers used, applications accessed, communication behavior, information shared, and many more.