Security information and event management platforms that aggregate logs, correlate threats, and trigger automated responses. Covers real-time alerting, threat hunting, incident investigation, and compliance reporting across hybrid environments.