Cybersecurity definition
What is UEBA?
UEBA stands for User and Entity Behavior Analytics.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Analytics that baseline what's normal for a given user or system and flag deviations from that baseline, catching suspicious activity even without a matching rule.
Where UEBA fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.TelemetryThe stream of activity data — process starts, file changes, network connections — that an agent continuously records and sends to a central system for analysis.