Risk of leaving templates

Templates for building policies to identify users likely to leave the organization.

LinkedIn Career interests status updated

Available under any of the following licenses: FortiDLP Enterprise, FortiDLP Managed

Detects when a user updates their LinkedIn Career interests status. Statuses include Actively applying, Casually looking, and Not open to offers.

Tactic	Technique	Sub-technique
TA0042 (Resource Development) attack.mitre.org/tactics/TA0042/

Note: MITRE ATT&CK indicators require Agent 11.4.1+.

Incident clustering rule	Default
Cluster by policy	Disabled

Supported actions: Display message, Lock, Isolate, Take screenshot, Reboot

LinkedIn profile updated

Available under any of the following licenses: FortiDLP Enterprise, FortiDLP Managed

Detects when a user updates their LinkedIn profile.

Tactic	Technique	Sub-technique
TA0042 (Resource Development) attack.mitre.org/tactics/TA0042/

Note: MITRE ATT&CK indicators require Agent 11.4.1+.

Incident clustering rule	Default
Cluster by policy	Disabled

Supported actions: Display message, Lock, Isolate, Take screenshot, Reboot