User Behavior Analytics

Baseline what a legitimate account normally does; alarm on anything that deviates. Detects the compromised insider — the account behaving out of character — that credential checks alone can’t catch.