Game over for rogue users with Change Auditor Threat Detection