Behavior-Based Network Detection leverages common activity patterns to determine whether a current activity represents a deviation from normal activity and could therefore pose a threat, at which point an alarm will be raised.

Rather than collecting and analyzing logs from a SIEM, AD, etc., Network-based systems strategically place agents on the network to capture data flows and activities.