Authorization Event Thresholding

# Description

Collecting authorization events, creating a baseline user profile, and determining whether authorization events are consistent with the baseline profile.