## Module 23 Review
You have explored 5 critical SIEM Use Cases:
1.  **Brute Force**: High volume failures.
2.  **Beaconing**: Periodic C2 heartbeat.
3.  **Impossible Travel**: Geo-velocity anomalies.
4.  **Privilege Escalation**: Group changes and sudo abuse.
5.  **DNS Tunneling**: Exfiltration via Port 53.

These rules form the baseline of most SOC detection strategies.