About this site
This is a working reference on user and entity behaviour analytics, written for the people who have to deploy, tune and operate it rather than for the people who buy it.
What is here
Forty-two records across six sections: foundations, data engineering, detection methods, operations, governance, and the commercial context. Roughly forty thousand words in total.
Every record follows the same structure, borrowed from the way detection engineers document analytics: the explanation, a practical procedure, the false positives you should expect, and the assumptions the method rests on. The last two are not optional. A technique described without its blind spots cannot be used safely.
Who it is for
Security engineers deploying behavioural analytics. Detection engineers writing the analytics themselves. Analysts triaging the output. Programme owners deciding whether to buy, build or wait.
It assumes familiarity with security operations. It does not assume any background in statistics or machine learning, and where the mathematics matters, it is explained in words.
Editorial position
No vendor material, no sponsored content, no product rankings. Where commercial products are discussed it is in terms of the questions worth asking and what the answers indicate.
Written from the defensive side only. There is nothing here about evading detection or moving data unobserved.
Where guidance touches privacy law or employment law, it is a general description of common obligations rather than legal advice. Rules vary substantially by jurisdiction and change. Involve counsel before deployment.
About this domain
The address buildcnhba.com previously belonged to the Central Nebraska Home Builders Association, a trade association in Kearney, Nebraska. That organisation's site is no longer here and this site has no connection to it.
If you followed a link expecting the association — a home show registration, an exhibitor form, a membership application, the golf tournament — none of that content is available here, and those addresses return a clear "gone" response rather than redirecting you somewhere unrelated. Please contact the association directly.