Security requires visibility. uberAgent ESA provides just that. Built on top of the existing uberAgent User Experience Monitoring product, uberAgent Endpoint Security Analytics tags risky processes, detects potential threats resulting from configuration changes and provides deep insights into application and even script activity.
Slides PDF link - https://conf.splunk.com/files/2019/slides/SECS2534.pdf?podcast=1577146216