Protecting the enterprise against unknown internal and external cyberthreats is a critical priority on the agenda of every CISO. Security user behavior analytics (SUBA) solutions promise to provide security and risk professionals with a unified view of employee activity across networks, devices, and apps and the ability to detect suspicious activity — quickly. This report examines the critical capabilities of SUBA solutions and provides an overview of specialized SUBA vendors.