splunk

Splunk SIEM platform; lets an agent query authentication logs, endpoint events, and network activity to investigate security incidents, correlate fraud signals, and support threat hunting.