Enterprise Security Log Correlation and Threat Detection System

Create an advanced log aggregation and threat detection system that ingests security logs from multiple enterprise systems (firewalls, authentication servers, network devices) in real-time. Implement complex event processing to correlate log entries across different sources, use machine learning to establish baseline behavior patterns, and automatically generate high-fidelity threat alerts with contextual investigation recommendations.