After an increase in adversarial activity, a company wants to implement security measures to mitigate the risk of a threat actor using compromised accounts to mask unauthorized activity. Which of…

A Web Application Firewall (WAF) primarily protects web applications from common attacks like SQL injection and cross-site scripting, not specifically from compromised accounts masking unauthorized activity.

Threat intelligence platforms provide information about known threats, attack techniques, and indicators of compromise, which is useful for proactive defense but doesn't directly detect anomalous behavior from compromised internal accounts.

User and Entity Behavior Analytics (UEBA) systems are designed to establish baseline patterns of normal user and entity behavior and then detect deviations that could indicate compromised accounts or insider threats. By monitoring for anomalies, UEBA can unmask unauthorized activity even when legitimate credentials are used.

Reverse engineering is the process of analyzing software to understand its design and functionality, which is not a direct security measure for detecting real-time unauthorized activity from compromised accounts.