Today's advanced threats target individual users, with the goal to compromise identities and impersonate legitimate users. Password requirements have become more complicated and have led employees to use unsafe passwords. In this new dynamic environment, what's needed are a series of observation and listening posts, so the cybersecurity team can understand which user activity is normal, and which is abnormal – all in real time.