SIEM (Security Information and Event Management)

A SIEM aggregates logs from servers, firewalls, and applications, then correlates them to surface suspicious patterns. It provides the visibility needed for detection, investigation, and compliance.