Enables security analysts to investigate detected anomalies and trigger response actions through the anomaly log interface.

: Displays the actions taken based on the severity of the anomaly.

·         The available actions are also displayed on the menu. If the user finds the automated response to a detected anomaly insufficient, they can manually execute any action by clicking it and confirming.

The available actions are also displayed on the menu. If the user finds the automated response to a detected anomaly insufficient, they can manually execute any action by clicking it and confirming.

Kron DAM Configuration for Threat Threshold Incident Response

Anomaly Actions

Detected Risk Scores

3.8.1 User/Device/Policy Definition

Dynamic Data Masking

Oracle RAC Configuration

Hive - Zookeeper Configuration

Connecting with the Kron DAM SQL Proxy

Read-Only Mode on SQL Server

SQL Proxy

Session Logs

Query Logs

Active Sessions

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Creating a Notification Target

Defining an Alarm Policy (cloned)

Defining an Alarm Policy

Database Alarm

Kron DAM Configuration for Connection of ML-Based Threat Analytics and Response Engine

ML Engine Endpoint Configuration

Threat Analytics Dashboard and Investigation

Threat Analytics and Response Engine Configuration

User and Entity Behavior Analytics

SQL Proxy Configuration for SSO

Device Group Configuration in SSO

Configuring SSO Token Generation for Oracle and MSSQL Databases

Establish Connection to Database with SSO

Single Sign-On (SSO)

Creating a Vault Account

Vault Password Checkout

Associating a Vault Account with a Database Device

Add Vault Account

Connection Reservation and Approval

Query Approval and Management

Logging and Auditing

Connection Reservation & Command Approval

Denial-of-Service (DoS) Protection

Connection Rate Limit

Database Packet Rate

User Packet Rate

Buffer Overflow Attack Protection

DAM Object Explorer Usage

DAM Object Explorer

Creating Data Types 

Bulk Data Type Import

Data Discovery

Schedule Discovery

Data Regulatory Standards

Data Dictionary

Excluded Column Data Types

Applying Masking from Scheduled Discovery Results

Sensitive Data Discovery

Database Audit Report

Vulnerability Scanner Report

Reports

Permit Zone

Database Discovery

Adding Function Groups

Adding Function Realms

Menu Lists Management

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Reference Guide