Security logs have a habit of picking up data they were never supposed to carry. Payment events come through with card numbers attached. Application logs capture billing zips, phone numbers, and cardholder names, and for payment data specifically, that's PCI DSS scope whether you meant to bring it

User and Entity Behavior Analytics (UEBA) has traditionally been about heuristics, thresholds, and a lot of manual investigation. In a world where identity fabrics span SaaS, cloud, and homegrown apps, and attackers move faster than ever, UEBA needs to be faster, more context-rich, and easier for analysts to act