UEBA (User and Entity Behavior Analytics)

Also known as: User and Entity Behavior Analytics, Behavioral Analytics

Security analytics that compare user, device, account, or system activity with expected behavior to identify meaningful anomalies.

User and Entity Behavior Analytics builds or applies behavioral context to users, accounts, devices, applications, and other entities. It helps a security team find activity that may be suspicious even when no simple signature fires. Buyers should ask how the baseline is created, how risk is scored, which evidence explains the anomaly, how false positives are handled, and whether the capability is included in the quoted SIEM edition.