System for monitoring the actions of privileged users, with extended protection: proactive behavior during unauthorized actions and control of connections between programs (software-to-software / application-to-application).