“By monitoring the internal network with machine learning, the listed behaviors becomes a list of behaviors that every attack must perform, and every one of these behaviors is detectable. In fact, the more the attack does, the easier it becomes to notice,” says said Chris Morales, head of security analytics at Vectra.