Many enterprises are facing security threats from their internal networks. Auditing the online behavior of internal users is an effective way to find and solve such security threats. To satisfy this need, HP Intelligent Management Center (IMC) user behavior auditor (UBA) was introduced. It provides a high-performance, scalable network log audit and analysis solution. UBA provides comprehensive log collection and audit functions and supports various log formats such as NAT, flow, NetStreamV5, and DIG. UBA provides DIG logs for you to audit security-sensitive operations and digest information from HTTP, FTP, and SMTP packets. UBA provides good scalability, and the behavior audit is based on the IMC platform and thus adapted to network environment changes. UBA implements user behavior tracking with the User Authentication Manager (UAM) module.