SIEM

SIEM aggregates and analyzes security logs in real time to detect threats and support incident response. Identity events like failed logins are key SIEM data sources.