Description

Splunk User Behavior Analytics is a machine learning-driven user and entity behavior analytics solution designed for IT security analysts. It enables users to discover abnormalities and unknown threats, perform behavior baselining, peer group analytics, and clustering, prioritize and visualize threats to investigate, and automatically stitch anomalies observed across multiple-entities, users, accounts, devices, and applications to a single threat. Features include detection of fraudulent website activity, analytics-based workflow, behavior-based alerts, machine learning, and risk scoring framework.