Veriato Cerebral Administrator’s Guide 5/13/2019 Table of Contents Getting Started ........................................................................................................... 7 About This Guide ............................................................................................................................................... 7 About Veriato Recon/360 ................................................................................................................................. 7 Veriato Server - Recorder communication .................................................................................................... 9 Data and Disk Space Consumption .............................................................................................................. 11 Using the Management Console ............................................................................................................................................................ 12 Logging in ......................................................................................................................................................... 12 Activating Veriato Recon/360 ........................................................................................................................ 12 Getting to know the Management Console ............................................................................................... 13 Global Options ..................................................................................................................................................................................................... 15 Using a Restart Message ................................................................................................................................ 18 Viewing the Management Console Log ...................................................................................................... 22 Deploying the Recorder ......................................................................................... 23 Deployment Options ....................................................................................................................................... 23 Add Recorders Wizard .................................................................................................................................... 26 Deploying via a Manual Setup ....................................................................................................................... 32 Importing Devices ........................................................................................................................................... 34 Deploying to Android ...................................................................................................................................... 36 Updating the Veriato Recorder ..................................................................................................................... 40 Managing Recorders ............................................................................................... 41 About Recorders .............................................................................................................................................. 41 Managing Recorder Groups ........................................................................................................................... 48 Adding Recon or 360 Capability .................................................................................................................... 49 Removing or Disabling Recon or 360 License Capability ......................................................................... 50 Changing an Assigned Recording Policy .................................................................................................... 51 Automatic Check for Version Updates ......................................................................................................... 53 Updating the Recorder ................................................................................................................................... 54 Uninstalling (Remove) Recorder ................................................................................................................... 55 About to Install/Update/Uninstall ................................................................................................................. 56 Cancelling all actions ...................................................................................................................................... 58 Managing Users ........................................................................................................ 59 Grouping Users ................................................................................................................................................ 61 Adding Users .................................................................................................................................................... 64 Using Active Directory to Add Users ............................................................................................................ 66 Adding One User at a Time ............................................................................................................................ 68 Importing Users ............................................................................................................................................... 69 Viewing User Activity ...................................................................................................................................... 72 2 Administrator’s Guide© 2019 Veriato, Inc. All rights Reserved. Setting Policy ............................................................................................................ 74 Alerts - Anomalies ............................................................................................................................................................................................. 75 Anomaly Alerts ................................................................................................................................................. 75 Add Anomaly Alert – Alert Type ..................................................................................................................... 76 Add Anomaly Alert - User Selection ............................................................................................................. 77 Add Anomaly Alert - Sensitivity ..................................................................................................................... 81 Add Anomaly Alert - Action ........................................................................................................................... 82 Alert Summary ................................................................................................................................................. 84 Baseline Anomalies ......................................................................................................................................... 86 Anomaly - Self-to-Self Comparison ............................................................................................................... 90 Anomaly – Self-to-Group Comparison ......................................................................................................... 92 Anomaly - Compromised Credentials .......................................................................................................... 93 Compromised Credentials Activities ............................................................................................................ 97 Compromised Credentials VPN Servers .................................................................................................... 100 Email Activity Anomalies .............................................................................................................................. 101 Document Activity Anomalies ..................................................................................................................... 102 Language Analysis Anomalies ..................................................................................................................... 103 Resource Usage Anomalies ......................................................................................................................... 105 Sentiment Analysis Anomaly ....................................................................................................................... 107 Alerts - Event ...................................................................................................................................................................................................... 109 Alert on 360 Events ........................................................................................................................................ 109 Add Event Alert – Alert Type ........................................................................................................................ 111 Add Event – Users .......................................................................................................................................... 112 Add Event Alert - Conditions ....................................................................................................................... 112 Advanced Query ...........................................................................................................................................