Behaviour monitoring, also known as network behaviour analysis (NBA) or network behaviour anomaly detection, is the collection and analysis of network information to identify malicious activity. Behavioural monitoring tools analyse data from a wide range of sources and use machine learning to identify patterns that could suggest an attack is taking place.Behaviour monitoring, also known as network behaviour analysis (NBA) or network behaviour anomaly detection, is the collection and analysis of network information to identify malicious activity. Behavioural monitoring tools analyse data from a wide range of sources and use machine learning to identify patterns that could suggest an attack is taking place.

When conducted over an extended period of time, behaviour monitoring allows organisations to benchmark typical network behaviour, which helps to identify deviations. Any anomalies identified can then be escalated for further analysis.