Skip to main contentWhat is Insider Threat Policy?
Insider threat policies detect data exfiltration, unauthorized access, policy violations, suspicious behavior, and insider risk indicators.
Available Variants
InsiderThreatBlockPolicy: Pattern detection with blockingInsiderThreatBlockPolicy_LLM: LLM-powered block messagesInsiderThreatBlockPolicy_LLM_Finder: LLM detection for better accuracyInsiderThreatAnonymizePolicy: Anonymizes threat indicatorsInsiderThreatReplacePolicy: Replaces with placeholderInsiderThreatRaiseExceptionPolicy: Raises DisallowedOperation exceptionInsiderThreatRaiseExceptionPolicy_LLM: LLM-generated exception messages
