Yes, multiple aspects of behavioral analysis of every user and app are available up and down the network stack focusing on the application layers 4-7. This includes determining good and bad network behavior including spotting anomalous traffic in real time.
