The process of analyzing common behaviors of users on a network. Common interactions Common device communication Any deviations from the norm can trigger alerts. Tools Dynatrace