Axur's Anomaly Alert is a crucial tool for safeguarding your company against emerging threats and targeted attacks. By closely monitoring the mentions of your brands and related terms by threat actors, you can swiftly identify potential scams and promptly respond to mitigate any potential damage.
Here's how the alert system operates:
Anomaly alert creation is available within the Explore feature, on the Deep & Dark Web workspace.
The alert undergoes hourly verification based on your configured settings, including query, set filters, and grouping of similar messages.
Alert emails and platform notifications are triggered once the user-defined threshold is surpassed.
All team members with Explore access (specialists and managers) can create, view, and delete an anomaly alert.
Team members can personalize their preferences in My Preferences, choosing to either keep or disable email alerts for detected anomalies.
Alert Configuration Options
1. Percentage Change from Hourly Average:
The average is calculated based on the volume of messages from the past seven days, excluding the most recent hour's data.
An alert is triggered if the average for the last hour exceeds the calculated average value by a user-defined percentage (X%).
2. Absolute Number of Events:
This option counts the volume of events that occurred in the past hour.
An alert is triggered if the number of events exceeds the user-defined absolute value (X).
Based on our previous tests, we recommend the following anomaly alert settings for most cases:
1. Search for the asset name using the Explore query.
2. No need to select any other filter.
3. Utilize the percentage change from the hourly average, with a variation of 300%.
This basic setting will get you started, but you have the flexibility to create multiple alerts with different parameters, queries, and filters. Feel free to explore and customize the settings according to your specific needs. Go ahead and try it out!
What to do with an Anomaly Alert?
It's important to keep an eye on the increase of ill-intentioned individuals mentioning specific brands and terms, as this helps us detect potential issues early on, such as exploiting platform vulnerabilities or planning targeted attacks against the brand.
When we remain vigilant, companies can act quickly against these emerging threats and prevent further harm. Additionally, alerts can be customized, so when you receive one, you can analyze the messages that triggered it, providing insights into fraudsters' tactics. This, in turn, helps bolster your fraud detection and online security measures.
If you have any questions, feel free to reach out at [email protected] 😊