The Aggregated Activity model tracks a user’s general activity by time and creates a model for the predicted weekly behavior patterns.
Enable the Aggregated Activity machine learning model to display the user’s general activity by time on the User Details page. If the user’s activity deviates from the learned behavior, it is deemed suspicious and a Sense Event is generated to increase the user’s risk score.
UBA : Abnormal increase in User activity
Log source types
Any log source with events that provide a username.