Disgruntled Dan

Offender Profile:

Dan isn't happy with his latest performance review. He's been with the company for 15 years and has been in seven different roles, but his access privileges have never changed. He's headed to a competitor in two weeks, so he decides to grab every file and email he can access…just in case.

Alleged Behavior:

• Saves every file and email he can access
• Emails information to his personal email address
• Deletes information that makes him look bad
• Covers his tracks

The Verdict:

Varonis creates a baseline of every user's normal activity volume, what data they normally access, what data is associated with a user's past roles that they don't use anymore, and what data isn't used by anyone anymore. Our threat models can tell you when Dan starts reaching beyond what he normally accesses to do his job.