Match each description to either SIEM or SOAR

$$ Helps detect potential threats in real time

$$ Collects logs from firewalls and servers

$$ Enhances context with threat feeds

$$ Generates alerts based on security rules

$$ Requires manual investigation of

SOAR alerts

$$ Aggregates threat intelligence

$$ Provides compliance reporting

$$ Automates incident response workflows

$$ Ingests data from multiple security tools

$$ Reduces response time with playbooks