PUBA uses data analytic techniques, some assisted by machine learning tools, to detect threats based on anomalous behaviour against established and quantified baseline profiles of administrative groups and users. Any attempted deviation from least privilege would be red flagged.

The solution provides targeted, immediately actionable threat alerts by identifying previously undetectable, malicious privileged user activity.
By applying patented analytic algorithms to a rich set of privileged account behavioral data, the solution produces highly accurate and immediately actionable intelligence, allowing incident response teams to disrupt and respond directly to the attack.

Cyberi3secure have experience in deploying following cyberark PTA architecture: