Helix Enterprise analyzes organizational-level assets (or entities) such as users and hosts to identify potential insider threats. This detects behavior anomalies by these assets, creates detections, and alerts the system immediately.
Note
For details, see Using asset-based alert correlation.