The Unit21 transaction monitoring system can flag transactions as well as events.
Events can be anything such as "USER LOGIN".
A rule can then flag a user if they login more than 10 times in 1 hour. This is called action event flagging.
An alert that catches an action event will have an additional tab in the alert detail page called Action activity:
Action events are also included in alert exports.
Updated 11 months ago