3. The apparatus of claim 1 , the processing circuitry to: obtain the scenario rules and the data from one or more data system coupled via one or more network connections; and apply the scenario rules to the actions by comparing each indication of an action to each scenario rule to determine whether an entity committed a scenario violation, wherein the scenario rules define activity to detect the targeted behavior.
3. The apparatus of claim 1 , the processing circuitry to: obtain the scenario rules and the data from one or more data system coupled via one or more network connections; and apply the scenario rules to the actions by comparing each indication of an action to each scenario rule to determine whether an entity committed a scenario violation, wherein the scenario rules define activity to detect the targeted behavior. 4. The apparatus of claim 3 , the processing circuitry to generate indicators for entities committing scenario violations based on applying the scenario rules, each indicator to indicate an entity committed a scenario violation.