A type of cyber security process that models and identifies typical and abnormal behavior of humans and systems within a network and can help in discovering security anomalies in user and system behavior. UEBA uses advanced analysis, aggregates data from logs and reports, and looks at packet, flow, file and other types of information, as well as certain kinds of threat data to figure out whether certain kinds of activity and behavior are likely to constitute a cyberattack