A dedicated appliance that tracks, stores, and analyzes security event data that is generated by other software within the network.