Security Information and Event Management (SIEM) system using ELK Stack for real-time threat detection and visualization. Monitors SSH authentication, web traffic, and firewall logs to identify SQL injection, brute force attacks, and path traversal attempts.