User Behavior Analytics (UBA) can be used to complement and extend an enterprise security program to detect and remediate against an active intrusion by highlighting anomalous account behavior. Once network administrators get a sense of what’s normal for both the average network and for their own enterprise, they can take advantage of a UBA solution to spot abnormal events and patterns, which can, in turn, help pin down an intrusion event before significant damage is inflicted or persistent access is achieved.