Monitor IT infrastructure security

Trigger: Continuous ingestion of system logs, network traffic, and endpoint telemetry generates automated security alerts.

1. Collect and aggregate system logs, network traffic, and endpoint telemetry
2. Apply threat intelligence feeds to analyze monitored data
3. Correlate events to detect anomalies and potential policy violations
4. Triage and investigate generated security alerts for false positives
5. Audit system activity to ensure compliance with privacy and security protocols
6. Escalate confirmed security breaches or flaws to the incident response team

Outcome: Security anomalies and infrastructure vulnerabilities are verified and escalated for remediation or incident response.