UEBA SPL SOAR Baseline check Multi-source data correlation analysis Alarm noise reduction Log, flow, database audit Fine-grained asset monitoring Flexible customization Open API Closed-loop vulnerability management