Zscaler Employment Search Web Activity

The analytic identifies web activity related to employment searches within a network using Zscaler web proxy logs. It focuses on entries categorized as 'Job/Employment Search' and analyzes data points such as device owner, user, URL category, destination URL, and IP. This detection helps monitor potential insider threats by identifying users who may be seeking new employment, which could indicate a risk of data exfiltration or other insider threats, potentially leading to sensitive information leakage or other security breaches.