What happened with UEBA?
UEBA promised it would identify the guilty employees who were "misbehaving." It also promised to make life more sane for SOC analysts. But many UEBA solutions continue to have the reputation of being "noisy." Too many "false positive" alerts continue to plague SOCs. Now nearly every SIEM has a UEBA solution bundled into it but for many life in the SOC is getting worse with conditions such as increasing investigation times.