UEBA

monitors the activities of privileged users. It uses real-time profiling algorithms to recognize behaviors that are different from the usual activity and generates notifications. It can detect attacks on the Kerberos protocol such as Golden Ticket. It is able to assess the risks related to the use of privileged accounts and other security incidents on an ongoing basis.