Only about one-third of organizations today collect user behavior monitoring data. Rapid7’s Tod Beardsley, security research manager, and Roy Hodgman, data scientist, have released a best practices guide. These metrics offer visibility into potential insider threats and show early red flags for when accounts have been compromised by external attackers. The key is remembering that these metrics are most useful when they’re measuring change of behavior, which means that the foundation of a behavior analytics program is understanding what normal behavior looks like before seeking out anomalies.”]
Source: https://www.darkreading.com/analytics/4-tricks-for-getting-the-most-out-of-user-behavior-analytics