Top UEBA use cases in enterprise cybersecurity

User and entity behavior analytics tools find patterns hidden in an ocean of data, making it critically important in cybersecurity. Explore key UEBA use cases in the enterprise.

• Share this item with your network:

• John Burke, Nemertes Research

User and entity behavior analytics technology uncovers hidden risks to the enterprise. It does this by sifting through streams of data from various sources and looking for patterns and anomalies. That is, UEBA learns what is expected or normal and sniffs out variations that signal threat actor activity, such as attacks in progress, successful compromises, internal reconnaissance and data exfiltration.

UEBA specifically analyzes the online behavior of both people -- e.g., user accounts -- and software or hardware systems -- e.g., entities. It aims to identify anomalous behaviors, such as a user account suddenly downloading a huge amount of data or a network appliance attempting to connect to a server with which it ...