in which either an authenticated user is taking advantage of permissions to abuse or misuse an application, or when an impersonator successfully bypasses authentication mechanisms and poses as a legitimate user. Tracking user journeys within applications does not rely on solution-specific rules, and is instead based on an advanced unsupervised machine learning algorithm to detect abnormal journeys which reflect abuse, misuse and malicious activities.