Oh, Behave! Figuring Out User Behavior (Windows Activity)

https://www.trustedsec.com/blog/oh-behave-figuring-out-user-behavior/