Involves real-time monitoring, alerting, and blocking of unauthorized network activities. Implemented in corporate networks, utilities, and defense facilities by security analysts. Vendors offer managed detection and response to IT procurement teams for proactive threat neutralization and incident investigation.