Behavior Rules
Console View

Behavior Rules allow administrators to define custom logic for detecting suspicious activity based on collected behavior data.
Creating Rules
You can create rules such as:
- "Alert if user logs in from outside US."
- "Block if login velocity exceeds 10 attempts/minute."
- "Require MFA if login is from a new device."
These rules are then referenced in your Global Session Policies or Application Sign-on Policies.