Security operations and administration. Continuous monitoring (passive, active, real-time), Identify thread sources and event, Security analytics, metrics and trend.
