Identifies indicators of compromise, anomalous network/endpoint behavior, and active intrusion patterns from the provided data.