Data about organizational-level assets (or entities) such as users and hosts to identify potential insider threats.