Skip to main content
Identity Personas are multi-dimensional profiles TOTAL builds for each enrolled identity. They combine behavioral, environmental, and access signals so analysts can see how someone typically works, how that profile is changing, and where risk concentrates.

​
Overview

A Persona is TOTAL’s consolidated view of one identity across 72 dimensions derived from cross-domain data: how they collaborate, authenticate, use tools, move through time and space, and align with their role and peers. Personas support next-step prediction for identity-related events and are continuously evaluated for drift so slow, sophisticated changes do not go unnoticed.

​
The Persona Page

Open any identity from the Persona Directory to see their Persona page: AI-generated narrative, peer and group context, active threat cases when present, and links into cluster-level context.
Screenshot2026 03 26at5 52 06PM

​
Identity Persona Visualization

The Identity Persona visualization maps signals into a network-style graph: nodes reflect signal categories and relationships, so you can scan how strongly different dimensions cohere for this user.
Screenshot2026 03 25at1 24 28PM
For dimension-level detail, drift cards, and peer comparison charts, use Persona Signals and Drift Insights.

​
Persona Cluster Visualization

The Persona Cluster view situates this identity among like-cyber-minded peers grouped by TOTAL’s clustering model. It complements the identity graph by showing how this Persona fits a broader risk and behavior cohort.
Screenshot2026 03 25at3 21 24PM
See Clusters for how clusters are formed, shared attributes, and drift at the cohort level.