Authentication Event Thresholding

# Description

Collecting authentication events, creating a baseline user profile, and determining whether authentication events are consistent with the baseline profile.