Platform as a service (PAAS) featuring software platforms for computer security surveillance that correlate information in computer security or operational dashboards, rules, reports, or events through the use of practical and accurate security rules and algorithms that filter out event types that are less relevant, less actionable and unnecessary to security threat detection processing by information and event management (SIEM) software systems or other event logging software systems, and that identify the difference between normal and abnormal user behavior specific to a particular organization