What it actually does
UEBA builds a per-identity behavioural baseline (working hours, accessed assets, data volumes, geographic footprint). Any drift from baseline scores against peer-group statistics, generating an explainable risk score.
Why this matters in Kenya
Most ODPC determinations involving insider misconduct (telco CDR snooping, hospital VIP-record snooping, SACCO debt-shaming) are catchable here — long before they become a public scandal.