Detecting account compromise with UEBA detection packages