← Cybersecurity Alphabet Soup

UBA

User Behavior Analytics

operationshard

UBA is a detection approach that builds a baseline of how each user account normally behaves, then flags deviations such as odd login times or unusual data access. It watches only human accounts, which is what distinguishes it from the broader UEBA that later added devices and service accounts. The term still appears in older tools and documentation, so recognizing it helps when comparing vendor detection capabilities.

Sources

More in operations