CCIS: CrowdStrike Certified Identity Specialist

An unusual-login-to-endpoint detection identifies a user logging on to an endpoint that is outside that user’s normal endpoint-use pattern. Here, bbanner is associated with CAST-EAGLE-ADMN, so the unusual condition is that bbanner does not typically use CAST-EAGLE-ADMN but is observed logging in to it.