That's the problem that most SIEM implementation have. Splunk have been doing behavioral anomaly detection for a while, but its still up to the employee/busine

That's the problem that most SIEM implementation have. Splunk have been doing behavioral anomaly detection for a while, but its still up to the employee/business to determine what the baseline is.