Extreme Archiving, Part 2: Understanding the ‘Normal’ You are a security analyst, sitting in the SOC, and you receive an alert that the user on machine 65.43.55.01 is acces…