Rapid7 InsightIDR
Leverages both User and Attacker Behavior Analytics to detect intruder activity, cutting down false positives and days’ worth of work for your security professionals. It hunts all of the top attack vectors behind breaches: the use of stolen credentials, malware, and phishing, and alerts on stealthy intruder behavior as early as possible in the attack chain.