Log Ingestion (REST API / gRPC)

Format Normalization & Enrichment

AI Pattern Learning & Anomaly Detection

Cross-Event Correlation

Attack Chain Detection

Behavior-Based Smart Alerts

Full-Text Log Search

Unusual access patterns

Frequency spikes

Slow/low attacks

Authentication anomalies

Data exfiltration signals

Privilege escalation

Configuration changes