UEBA (User and Entity Behavior Analytics)
Also known as: User and Entity Behavior Analytics, Behavioral Analytics
Security analytics that compare user, device, account, or system activity with expected behavior to identify meaningful anomalies.
User and Entity Behavior Analytics builds behavioral context around the things that act on a network.
- Users
- Accounts
- Devices
- Applications
- Other entities It helps a security team find activity that may be suspicious even when no simple signature fires. Ask five questions before paying for it.
- How the baseline is created
- How risk is scored
- Which evidence explains a given anomaly
- How false positives are handled
- Whether it is included in the SIEM edition you were quoted