Detection & Response
SIEM
Also: security information and event management
A platform that collects logs from across an organization, correlates them and raises security alerts.
In more detail
Security teams usually want agent activity to land in the SIEM they already use, so an alert about a risky command appears beside identity and network alerts. Standard formats and export integrations make that practical.