| Secret revealed by human actor |
Abnormal Behavior |
   |
| Previously inactive token is active again |
Abnormal Behavior |
|
| Previously disabled token has been reactivated |
Abnormal Behavior |
|
| Production secret is fetched by script |
Abnormal Behavior |
|
| Production secret is fetched by IDE client |
Abnormal Behavior |
|
| Production token is used by IDE client |
Abnormal Behavior |
|
| Idle identity fetched a secret |
Abnormal Behavior |
|
| Secret was fetched by non-privileged position |
Abnormal Behavior |
|
| Secret/Token activity from restricted location |
Abnormal Behavior |
|
| Vault dump |
Abnormal Behavior |
|
| NHI token used by multiple devices |
Abnormal Behavior |
|
| Secret was fetched by a new workload |
Abnormal Behavior |
|
| Too many entities are fetching the same secret |
Abnormal Behavior |
|