Watch this video on YouTube
Which countermeasure primarily focuses on monitoring and analyzing users' behavior in a system to detect any anomalies that could indicate a security threat?