In Configuration > Settings > Activity Sets, users with the Configuration Manager role can create and manage activity sets. These sets are best-practice groups of activities purpose-built for:

• Detecting potentially malicious behavior

• Analyzing compliance patterns

• Monitoring activity across a particular client or matter

In this section:

Activity sets

Three activity sets are available out of the box and are recommended. These can be customized when adding a rule or running a report:

• Threat Monitor: (13 activities.) This set groups activities associated with accessing, extracting, or removing content from the system, rather than activities that create or modify content. Used by default when creating Behavior Analytics Rules and Outliers reports.

• Compliance Indicating Activities: (29 activities.) This set groups activities across the document and records lifecycle, along with guest sharing and email filing, rather than activities that delete content. Used by default in Compliance > Adoption reports and when creating Compliance > Trending charts.

• Activity Monitoring: (32 activities.) This set combines the document and records lifecycle activities in Compliance Indicating Activities with deletion activities, for the broadest view of activity within a particular client or matter. Used by default when creating Matter Activity reports.

Activity sets are available for selection when working with the following:

• Behavior Analytics Rules and reports

• Matter Activity Rules and reports

• Outliers reports

• Analyze

• Compliance > Adoption report

• Compliance > Trending charts

Task: Create an activity set

You need the Configuration Manager role to complete this task.

1. In Configuration > Settings > Activity Sets, select Add Activity Set.

2. In the New Activity Set dialog, enter a name in the Name field. Use a name that reflects the possible threat or risk.

3. Select the check boxes next to the activities that you want to include.

4. Select Save. The new activity set is displayed on the Activity Sets page.

Task: Edit an activity set

You need the Configuration Manager role to complete this task.

1. In Configuration > Settings > Activity Sets, select (more options) > Edit in the row of the activity set that you want to edit.

2. Remove or add activities, then select Save.

Task: Reset an activity set

You need the Configuration Manager role to complete this task.

In Configuration > Settings > Activity Sets, select  (more options) > Reset in the row of the activity set.

Task: Delete an activity set

You need the Configuration Manager role to complete this task.

In Configuration > Settings > Activity Sets, select  (more options) > Delete in the row of the activity set.