Anomaly Detection - Overview
Any organization that deals with identity and access management or other forms of customer data must ensure that the data security is never compromised. Zoho One enables the organization owner and admins to keep an eye on unusual activities happening in the application. These unusual activities are labeled as anomalies and will be listed under the Anomaly Detection module.
A few terms used across the Anomaly Detection module are elaborated in the following section.
- Anomaly or anomalous activity: Any kind of unusual activity happening in the application. Logging in from an anomalous device/OS/IP address/location; logging in at an anomalous time; modifying user details from an anomalous location or at an anomalous time are few of the activities that can be marked as anomalous activities.
- Anomalous device: Sessions and relevant activities performed from an unusual device are labeled as anomalies based on an anomalous device.
- Anomalous browser: Sessions and relevant activities performed from an unusual browser are marked as anomalies based on an anomalous browser.
- Anomalous IP address: Sessions and relevant activities performed from an unusual IP address will be labeled as anomalies based on an anomalous IP address.
- Anomalous location: Sessions and relevant activities performed from an unusual location will be labeled as anomalies based on an anomalous location.
- Anomalous time: Sessions logged in an unusual time of the day are labeled as anomalies based on anomalous time.
- Actor: The user who performed the anomalous activity is termed as the actor. Both admin and non-admin users can be actors of an anomaly.
- Target: The user affected by the activity is termed as the target. For example, when an admin resets the password of a user, the admin who performed the action is the actor, and the user whose password is reset is the target.
The Anomaly Detection module comprises two tabs: Dashboard and Anomalies.
Dashboard
The Dashboard provides an overall view of the pattern in which anomalies are detected. This helps you assess the anomalies based on various aspects and modify security practices in your organization if necessary.
The following section describes each widget available in the Dashboard. Each widget contains filters to display data based on a specific timeline, such as today, yesterday, last 7 days, last 30 days, this month, last month, a specific date, or a custom range.
- Anomalies by count: This widget displays the number of anomalies detected in a day for the selected timeline.
- Anomalies by type: This widget displays five most detected anomalies for the selected timeline.
- Anomalies by actor: This widget displays the number of anomalies for the selected timeline against the corresponding actor.
- Anomalies by impact: This widget displays the anomalies for the selected timeline against the impact they make on the security of the organization.
Anomalies
In the Anomalies tab, you can view and resolve the anomalies detected in the application. The list view displays anomalies with specific information such as the actor email, login details, activity details, and reasons for marking the activity as anomalous. For security reasons, admin users cannot resolve anomalous activities performed by the super admin or from their respective accounts.
You can choose to resolve an anomaly with one of the following options:
- If the activity marked as anomalous was performed by you and doesn't pose any security threat, you can mark the activity as non-anomalous.
- If you have any suspicion in the activity details or if you have confirmed that the activity is not performed by the intended actor, you can choose to deactivate the actor to restrict access to the application on a temporary basis or reset password of the actor to prevent data breach.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Troubleshooting - Overview
Use these resources to troubleshoot the common issues you may face in Zoho One. Each article will have a description of when you may face the issue, the reason for it's occurrence, and the possible measures you can take to resolve it. If you are ...Lite Users in Zoho One - Overview
Lite users provide a cost-effective way to provide limited app access to specific users in your organization without requiring full Zoho One licenses. This guide explains what Lite users are, which add-ons are available, and how to use them ...Encryption at Zoho One
Encryption is primarily used to safeguard the contents of a message so that only the intended recipient can read it. This is done by replacing the contents with unrecognizable data, which could be understood only by the intended recipient. This is ...Part 1- Getting started with Zoho One: Setting up your Organization and Applications
Zoho One brings together the apps your business needs to manage sales, marketing, finance, support, HR, collaboration, analytics, and more from one place. If you are setting up Zoho One for the first time, you do not need to configure everything at ...Zoho One Setup Checklist
Use this checklist to plan your first Zoho One rollout. Start with one business goal, set up the apps needed for that goal, onboard the right users, and then expand to other teams or workflows. Get familiar with Zoho One Explore the Zoho One layout ...
New to Zoho LandingPage?
Zoho LandingPage Resources