Why Is Suspicious Activity So Hard to Stop?

At CoEnterprise we have created a tool called SnowTrail that reveals suspicious behavior in Snowflake to the one individual who knows best what data an employee should be accessing, updating, and moving: their manager. Managers can review red flag behavior and choose to dismiss it or act.

SnowTrail has been built to identify concerning patterns in these data. It makes them visible on an interactive timeline in Tableau – but just as importantly, it surfaces these events through Slack notifications. Directly in Slack, managers can take immediate action within their workflow whether that means following up with the individual or disabling their access to Snowflake on the spot.