1. A method of analyzing an activity of a software application operating on a computing device, comprising: monitoring, via a processor of the computing device, the activity of the software application operating on the computing device to collect behavior information; determining whether the monitored activity should be associated with a user interaction (UI) based on the collected behavior information; determining whether a detected UI event corresponds to the monitored activity in response to determining that the monitored activity should be associated with the user interaction; collecting raw data from a sensor of the computing device in response to determining that the detected UI event corresponds to the monitored activity; generating analysis results by analyzing the collected raw data in conjunction with UI event information associated with the detected UI event, in response to determining that the detected UI event corresponds to the monitored activity; determining, based on the generated analysis results, whether the detected UI event correlates with a user of the computing device; classifying the detected UI event as an authentic UI event in response to determining, based on the generated analysis results, that the detected UI event correlates with the user of the computing device; classifying the detected UI event as a fake UI event in response to determining, based on the generated analysis results, that the detected UI event does not correlate with the user of the computing device; and determining whether the monitored activity is non-benign based on the classification of the detected UI event.