Pergunta de entrevista da empresa Salesforce

How would you approach identifying malicious user behavior?