Intrusion Detection Systems (Snort, Suricata, Zeek) - NetFlow/IPFIX analysis - Firewall logs - DNS query logging