User entity behavior analytics, otherwise referred to as UEBA, slowly emerged to replace UBA, offering more powerful solutions. As the threat landscape grew, “entities” were added to UBA to monitor malicious behavior beyond the user level. While UBA can detect human behavior within a network, UEBA can model behaviors of humans as well as the machines within networks, including devices, in addition to applications as well as networks, providing complete visibility. When behavioral abnormalities are associated with an entity (i.e. a particular IP address), attacks hardly go unnoticed. By using a baseline of normal user and machine behaviors, UEBA can recognize when a machine is compromised, and thus minimize the amount of damage that can be done.