Security analytics helps find needles in haystacks