Dynamic anomaly configurations include profiles for defining behavior that is considered anomalous. These profiles are based on activity category and activity types. Each profile is either predefined (provided for all tenants; cannot be modified or deleted by administrators) or user defined (can be created, modified, or deleted by administrators).

From the Anomaly Profiles page (System Settings > Anomaly Profiles), you can create up to four user-defined anomaly profiles. Each profile defines anomalous behavior for an activity category (for example, authentications or content updates), and activities associated with that category (for example, login, content download, or content delete).

The Anomaly Profiles page shows:

• The profile Name and Description
• The Activity Category (for example, ContentUpdate)
• Type - either Predefined (system-generated, cannot be edited or deleted) or User-Defined (can be created, edited, and deleted by administrators).
• Created Date - the date on which the profile was created.
• Last Modified By - the username of the person who last modified the profile (for user-defined profiles) or system (for predefined profiles).
• Last Modified Time - the date and time on which the profile was last modified.

• Actions - an Edit icon for displaying profile details and modifying user-defined profiles.

  You can filter the column display or download the list of profiles to a CSV file using the icons at the upper right above the list.

  To show or hide columns, click the Column Filter icon, and check or uncheck column headings.

  To download the listed profiles, click the Download icon and save the CSV file to your computer.

  The following procedures outline the steps for adding, modifying, and deleting user-defined anomaly profiles.

  You can have no more than four user-defined profiles. If you currently have four or more user-defined profiles, the New button appears dimmed. You must delete profiles to bring the number down to fewer than four before you can add new profiles.