A detection and response model that correlates telemetry across endpoints, identity, cloud, email, and network domains.