Credit Union Gains Visibility into Behavior Anomalies to Mitigate Ransomware Threats

Alex had used Netwrix Auditor at his previous job and appreciated its functionality, especially the alerting and risk scoring capabilities. When he joined Insight Credit Union, he continued to use Netwrix Auditor to improve the organization’s security posture. 

• Visibility into anomalous behavior. Alex receives alerts on activities that could be a sign of a security incident, such as logons outside business hours, multiple failed logons, changes to permissions and non-owner mailbox access events. He reviews users’ risk scores on a daily basis to identify high-risk accounts, which enables him to take action before a security breach occurs.
• Mitigation of ransomware attacks. The alerts on mass data removal or modification and excessive failed access attempts enable Alex to detect ransomware attacks in their early stage. Once Netwrix Auditor alerted him to an account that tried to access a lot of files. He thought it was ransomware and blocked the account immediately. Although it was not something malicious, Alex still felt relieved that Netwrix Auditor notified him about the mere possibility of ransomware.
• Optimized investigations. Alex uses Interactive Search to investigate operational issues, such as lost files or a user’s inability to log in to certain applications. He likes the state-in-time reports, which enable him to compare current and past system configurations.