Organizations run on a growing number of services and infrastructure types that enable them to build and scale their businesses quickly while focusing on their core competencies and differentiators. To manage this infrastructure so that the business can run securely requires insight into the access and interactions of endpoints, cloud infrastructure, SaaS services, and other components of its operations. The complexity and scale of this data and its interrelationships requires an ability to automatically detect security events of all types across multiple domains, and managing these events requires consolidation of information and well organized human and automated workflows.