EMET malicious user journey analytics powered by Reveal Security is a leading security analytics tool that uses user journey analytics to detect malicious activity for Cloud Apps.

The supported cloud apps are MS365, Salesforce, OKTA, AWS, AZURE, and Dynamics 365 (other SaaS applications are to be discussed separately).

The solution provides the following benefits:

• User Journey Analytics: User Journey Analytics is based on the analysis of activity sequences performed while using an application, in contrast with UEBA, which analyzes each activity individually and then builds a timeline. The sequence provides enriched context for anomaly detection and enables better accuracy based on journeys, as opposed to outcomes. Higher quality alerts mean security analysts reduce wasted time on false positives and alert for cases other products fail to notice.
• Multiple Journey Profiles per User: Leveraging RevealSecurity's patented clustering engine - tailored for clustering user journeys - TrackerIQ automatically learns multiple journey profiles across applications. Detecting anomalous journeys by comparing users to themselves and their peers provides an extremely high signal-to-noise ratio.
• Application Layer Detection and Response: TrackerIQ complements XDR solutions at the business application layer to detect threats and fraud. Existing detection solutions are focused on the infrastructure layers and on access to business applications, resulting in very limited effectiveness against malicious insiders as well as external attackers who succeed to bypass authentication mechanisms.
• Application Agnostic Detection: The detection model is applied to any SaaS or custom-built application, analyzing user journeys in and across applications to detect anomalies. This model eliminates the need to understand business application logic and no rules are required.