1. A non-transitory computer readable medium comprising instructions stored thereon that when executed, cause one or more processors to: identify a plurality of events on a system utilizing behavioral tracking, wherein the plurality of events includes one or more classified events and one or more unclassified events; display a list of one or more of the unclassified events of the plurality of events, that are associated with user-initiated actions; receive user input associated with an unclassified event of the displayed list of one or more unclassified events, wherein the input includes a selection by the user associated with a symptom resulting from the at least one of the unclassified events, wherein the at least one of the unclassified events is determined to be associated with the symptom; classifying the unclassified event as an unwanted event; and undoing the associated user-initiated action in response to receiving the input, placing the system in a state as though the associated user-initiated action had not occurred.