How to Identify a Single Fraudulent Transaction Among Millions

Are you accountable for monitoring privileged user activity? How can you spot a single, questionable transaction swiftly?