1. A non-transitory computer readable medium comprising instructions stored thereon to cause one or more processors to: identify a plurality of events on a system utilizing behavioral tracking, wherein the plurality of events includes a portion of automatically classified events and at least one manually classified event; display a subset of the plurality of events, the subset containing events that are unclassified, the unclassified events further including tracked actions initiated by a user of the system; receive input associated with at least one of the tracked actions of the displayed subset, the input originating from the user of the system, the input used for classifying the at least one of the tracked actions as an unwanted event; and undo the at least one tracked action in response to the receipt of the input, wherein the act of undoing places the system in a state as though the tracked action initiated by the user had not occurred.