@keyframes siem-in{0%{opacity:0;transform:translateY(10px)}to{opacity:1;transform:none}}.siem-risk{font:600 clamp(48px,4.6vw,72px)/.9 var(--display);letter-spacing:-.05em;color:#fff}.siem-risk small{font:500 12px/1 var(--mono);letter-spacing:0;color:var(--ice);margin-left:6px}.siem-note{font:400 11px/1 var(--mono);color:var(--on-dark-2)}.siem-note-l{font:400 11px/1.3 var(--mono);color:var(--label)}.siem-cl{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1.12fr);gap:24px;align-items:stretch}.siem-cl-rule{display:grid;grid-template-rows:auto auto auto 1fr;gap:20px;padding:24px;border-radius:24px;background:#fff;border:1px solid var(--line)}.siem-cl-dl .ps-tab[aria-pressed=true]{background:var(--navy);border-color:var(--navy);color:#fff}.siem-cl-head{display:flex;justify-content:space-between;align-items:flex-start;gap:16px;flex-wrap:wrap}.siem-cl-head h3{margin-top:10px;font:600 clamp(20px,1.75vw,26px)/1.1 var(--display);letter-spacing:-.04em;color:var(--ink)}.siem-cl-toggles{display:flex;gap:14px;flex-wrap:wrap}.siem-sw{display:inline-flex;align-items:center;gap:8px;font:500 12px/1 var(--mono);color:var(--label)}.siem-sw i{position:relative;width:32px;height:18px;border-radius:999px;background:var(--line);transition:background .3s var(--ease)}.siem-sw i:after{content:"";position:absolute;top:2px;left:2px;width:14px;height:14px;border-radius:50%;background:#fff;box-shadow:0 1px 2px rgba(3,18,74,.25);transition:transform .3s var(--ease)}.siem-sw[aria-checked=true]{color:var(--ink)}.siem-sw[aria-checked=true] i{background:var(--blue)}.siem-sw[aria-checked=true] i:after{transform:translateX(14px)}.siem-cl-dl{display:grid;grid-template-columns:96px minmax(0,1fr);gap:12px 14px;align-items:baseline;font-size:14px;line-height:1.45}.siem-cl-dl dt{font:500 11px/1.6 var(--mono);letter-spacing:.06em;text-transform:uppercase;color:var(--label)}.siem-cl-dl dd{margin:0;color:var(--ink);min-width:0}.siem-cl-dl dd b{font:500 13px/1 var(--mono)}.siem-cl-dl code{font:400 12.5px/1.5 var(--mono);color:var(--navy);background:var(--bg-3);border:1px solid var(--line);border-radius:6px;padding:2px 6px;word-break:break-word}.siem-cl-build{display:grid;gap:10px;padding:16px;border-radius:16px;background:var(--bg-3);border:1px solid var(--line)}.siem-cl-build ol{display:grid;gap:2px}.siem-cl-build li{display:grid;grid-template-columns:22px minmax(0,150px) minmax(0,1fr);gap:10px;align-items:center;padding:6px 0;font:400 13px/1.35 var(--sans);color:var(--body)}.siem-cl-build li i{display:grid;place-items:center;width:20px;height:20px;border-radius:50%;background:var(--blue);font:600 10.5px/1 var(--mono);font-style:normal;color:#fff}.siem-cl-build li b{font-weight:500;color:var(--ink)}.siem-cl-build li span{font:400 12px/1.35 var(--mono);color:var(--label);overflow-wrap:anywhere}.siem-cl-test{display:flex;flex-wrap:wrap;align-items:center;gap:8px 12px;padding-top:10px;border-top:1px solid var(--line);font:500 12.5px/1.4 var(--mono);color:#13744A}.siem-cl-test .ps-tab{height:30px;padding:0 12px;font-size:12px}.siem-cl-test .ps-tab[aria-pressed=true]{background:var(--navy);border-color:var(--navy);color:#fff}.siem-cl-methods{align-self:end;padding-top:16px;border-top:1px solid var(--line);font-size:13.5px;line-height:1.5;color:var(--body)}.siem-cl-eval{display:grid;gap:14px;padding:22px;border-radius:24px;background:var(--bg-3);border:1px solid var(--line)}.siem-cl-count{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:4px 16px;align-items:end}.siem-cl-k{font:500 11px/1 var(--mono);letter-spacing:.06em;text-transform:uppercase;color:var(--label)}.siem-cl-count b{grid-row:span 2;font:600 clamp(44px,4vw,60px)/.9 var(--display);letter-spacing:-.05em;color:var(--ink);font-variant-numeric:tabular-nums}.siem-cl-sub{font:400 12px/1.3 var(--mono);color:var(--body)}.siem-cl-strip{position:relative;height:44px;border-radius:10px;background:#fff;border:1px solid var(--line);overflow:hidden}.siem-cl-strip i{position:absolute;top:9px;bottom:9px;left:calc(var(--x) - 3px);width:3px;border-radius:2px;background:var(--muted);opacity:.4}.siem-cl-strip i.in{background:var(--err);opacity:1}.siem-cl-win{position:absolute;top:0;bottom:0;right:0;width:var(--w);background:rgba(3,80,212,.07);border-left:1.5px dashed var(--blue);transition:width .5s var(--ease)}.siem-cl-axis{display:flex;justify-content:space-between;margin-top:-8px;font:400 10.5px/1 var(--mono);color:var(--muted)}.siem-cl-act{display:flex;flex-wrap:wrap;gap:6px}.siem-cl-act .ps-tab[aria-pressed=true]{background:var(--navy);border-color:var(--navy);color:#fff}.siem-cl-cases{display:grid;gap:6px}.siem-cl-cases li{display:grid;grid-template-columns:22px auto auto minmax(0,1fr);gap:10px;align-items:center;padding:10px 12px;border-radius:12px;background:#fff;border:1px solid var(--line);font:400 12.5px/1.35 var(--mono);color:var(--ink);transition:opacity .3s var(--ease),box-shadow .3s var(--ease)}.siem-cl-cases .n{display:grid;place-items:center;width:22px;height:22px;border-radius:50%;background:var(--tint);font:600 11px/1 var(--mono);color:var(--blue)}.siem-cl-cases .v{justify-self:end;text-align:right;font-family:var(--sans);font-size:13px;color:var(--body)}.siem-cl-cases li.is-win{border-color:var(--blue);box-shadow:inset 3px 0 0 var(--blue)}.siem-cl-cases li.is-win .v{color:var(--ink);font-weight:500}.siem-cl-cases li.is-skip{opacity:.75}.siem-cl-cases li.is-miss{opacity:.6}.siem-cl-cases li.is-off{opacity:.4}.siem-cl-out{display:grid;gap:10px;padding:18px 20px;border-radius:18px;background:var(--navy);color:var(--on-dark)}.siem-cl-out.is-none{background:var(--navy-raised)}.siem-cl-out-top{display:flex;justify-content:space-between;align-items:center;gap:8px}.siem-cl-out .kicker{color:var(--ice)}.siem-cl-out p{font:500 15px/1.35 var(--sans);color:#fff}.siem-cl-dest{display:inline-flex;align-items:center;gap:8px;font:400 12px/1.3 var(--mono);color:var(--ice)}.siem-cl-dest i{width:7px;height:7px;border-radius:50%;background:var(--on-dark-2)}.siem-cl-dest i.ok{background:var(--ok-2)}.siem-cl-risk{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:4px}.siem-cl-risk li{display:grid;gap:2px;padding:8px 10px;border-radius:10px;background:#fff;border:1px solid var(--line);font:500 10.5px/1.2 var(--mono);letter-spacing:.04em;text-transform:uppercase;color:var(--label);transition:background .3s var(--ease),color .3s var(--ease)}.siem-cl-risk b{font:600 18px/1 var(--display);letter-spacing:-.03em;color:var(--ink);text-transform:none}.siem-cl-risk li.is-on{background:var(--navy);border-color:var(--navy);color:var(--ice)}.siem-cl-risk li.is-on b{color:#fff}.siem-tri{display:grid;gap:16px}.siem-tri-strip{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));border:1px solid var(--line-dark);border-radius:18px;overflow:hidden}.siem-tri-strip li{display:grid;gap:6px;padding:14px 16px;border-left:1px solid var(--line-dark);font:500 11px/1.2 var(--mono);letter-spacing:.06em;text-transform:uppercase;color:var(--on-dark-2);transition:background .4s var(--ease)}.siem-tri-strip li:first-child{border-left:0}.siem-tri-strip li b{font:600 clamp(26px,2.4vw,36px)/1 var(--display);letter-spacing:-.04em;text-transform:none;color:#fff;font-variant-numeric:tabular-nums}.siem-tri-strip li.is-on{background:var(--navy-raised);color:var(--ice)}.siem-tri-card{display:grid;gap:18px;padding:22px;border-radius:24px;background:var(--navy-raised);border:1px solid var(--line-dark);animation:siem-in .5s var(--ease) both;align-content:start}.siem-tri-head{display:flex;flex-wrap:wrap;align-items:center;gap:8px}.siem-tri-head h3{flex-basis:100%;font:600 clamp(19px,1.6vw,24px)/1.2 var(--display);letter-spacing:-.03em;color:#fff}.siem-tri-dl{display:grid;grid-template-columns:80px minmax(0,1fr);gap:8px 12px;font:400 13px/1.4 var(--mono)}.siem-tri-dl dt{color:var(--on-dark-2)}.siem-tri-dl dd{margin:0;color:#fff;overflow-wrap:anywhere}.siem-tri-group{display:grid;gap:4px;padding:12px 14px;border-radius:12px;background:rgba(157,182,255,.08);border:1px dashed var(--line-dark);font:400 13px/1.45 var(--sans);color:var(--on-dark)}.siem-tri-group b{font:500 11px/1.2 var(--mono);letter-spacing:.06em;text-transform:uppercase;color:var(--ice)}.siem-tri-ev{display:grid;align-content:start;border-top:1px solid var(--line-dark)}.siem-tri-ev li{display:grid;grid-template-columns:70px 1fr 1fr 64px;gap:8px;padding:9px 0;border-bottom:1px solid var(--line-dark);font:400 12px/1.3 var(--mono);color:#DCE5FF}.siem-tri-ev li span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.siem-tri-ev .bad{color:#FF8A8D}.siem-tri-act{display:grid;gap:8px}.siem-tri-act>div{display:flex;flex-wrap:wrap;gap:6px}.siem-tri-act .ps-tab[aria-pressed=true]{background:#fff;border-color:#fff;color:var(--navy)}.siem-q{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,1.15fr);gap:16px;align-items:stretch}.siem-q-list{border-radius:24px;background:var(--navy-deep);border:1px solid var(--line-dark);overflow:hidden;display:grid;grid-template-rows:auto 1fr;align-content:start}.siem-q-bar{display:flex;justify-content:space-between;align-items:center;padding:12px 16px;border-bottom:1px solid var(--line-dark);font:500 11px/1 var(--mono);letter-spacing:.06em;text-transform:uppercase;color:var(--on-dark-2)}.siem-live{display:inline-flex;align-items:center;gap:8px;color:var(--ice)}.siem-live i{width:7px;height:7px;border-radius:50%;background:var(--ok-2);animation:ps-pulse 2s infinite}.siem-q-row{display:grid;grid-template-columns:10px minmax(0,1fr) auto;gap:4px 12px;align-items:center;width:100%;padding:13px 16px;border-bottom:1px solid var(--line-dark);transition:background .3s var(--ease),opacity .3s var(--ease)}.siem-q-row:hover{background:rgba(157,182,255,.06)}.siem-q-row[aria-selected=true]{background:var(--navy-raised);box-shadow:inset 3px 0 0 var(--blue-bright)}.siem-q-row.is-new{animation:siem-new 1.2s var(--ease) both}.siem-q-row.is-muted{opacity:.55}@keyframes siem-new{0%{opacity:0;transform:translateY(-8px);background:rgba(157,182,255,.16)}to{opacity:1;transform:none}}.siem-dot{width:9px;height:9px;border-radius:50%;background:var(--ice)}.siem-dot.d-critical{background:var(--err)}.siem-dot.d-high{background:#FF8A8D}.siem-dot.d-medium{background:var(--warn)}.siem-q-main{display:grid;gap:3px;min-width:0}.siem-q-main b{font:500 14px/1.3 var(--sans);color:#fff;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.siem-q-main span{font:400 11.5px/1.2 var(--mono);color:var(--on-dark-2)}.siem-q-st{grid-column:3;grid-row:2;justify-self:end;font:400 11px/1 var(--mono);color:var(--ice)}.siem-mx{display:grid;grid-template-columns:260px minmax(0,1fr);gap:24px;align-items:start}.siem-mx-src{display:grid;gap:12px}.siem-mx-k{font:500 11px/1 var(--mono);letter-spacing:.08em;text-transform:uppercase;color:var(--label)}.siem-mx-src-list{display:grid;gap:6px}.siem-mx-sw{display:grid;grid-template-columns:16px minmax(0,1fr) auto;gap:10px;align-items:center;padding:11px 12px;border-radius:12px;border:1px solid var(--line);background:transparent;font:500 13.5px/1.25 var(--sans);color:var(--muted);transition:background .3s var(--ease),color .3s var(--ease),border-color .3s var(--ease)}.siem-mx-sw i{width:16px;height:16px;border-radius:5px;border:1.5px solid var(--muted);transition:background .3s var(--ease),border-color .3s var(--ease)}.siem-mx-sw small{font:400 11px/1 var(--mono);color:var(--muted)}.siem-mx-sw:hover{border-color:var(--blue-2)}.siem-mx-sw[aria-pressed=true]{background:#fff;color:var(--ink)}.siem-mx-sw[aria-pressed=true] i{background:var(--blue);border-color:var(--blue);box-shadow:inset 0 0 0 3px #fff}.siem-mx-sum{font:400 12.5px/1.6 var(--mono);color:var(--body)}.siem-mx-sum b{font:600 20px/1 var(--display);letter-spacing:-.03em;color:var(--ink)}.siem-mx-grid{display:grid;grid-template-columns:repeat(8,minmax(0,1fr))}.siem-mx-col{min-width:0;border-left:1px solid var(--line)}.siem-mx-col:first-child{border-left:0}.siem-mx-th{display:grid;gap:4px;min-height:64px;align-content:start;padding:12px 10px;border-bottom:1px solid var(--line);background:var(--bg-3)}.siem-mx-th b{font:600 13px/1.2 var(--display);letter-spacing:-.02em;color:var(--ink)}.siem-mx-th span{font:400 10.5px/1 var(--mono);color:var(--label)}.siem-mx-col.is-gap .siem-mx-th{background:rgba(229,72,77,.07)}.siem-mx-col.is-gap .siem-mx-th span{color:#B4232A}.siem-mx-cell{display:grid;gap:4px;width:100%;padding:9px 10px;border-bottom:1px solid var(--line);transition:background .3s var(--ease),opacity .3s var(--ease)}.siem-mx-cell b{font:500 12.5px/1.3 var(--sans);color:var(--ink)}.siem-mx-cell small{font:400 10px/1 var(--mono);color:var(--label)}.siem-mx-cell:hover{background:var(--bg-3)}.siem-mx-cell.is-off{opacity:.38}.siem-mx-cell.is-off b{text-decoration:line-through;text-decoration-color:var(--muted)}.siem-mx-cell[aria-pressed=true]{background:var(--tint);box-shadow:inset 3px 0 0 var(--blue);opacity:1}.siem-mx-detail{display:flex;flex-wrap:wrap;align-items:center;gap:8px 14px;padding:14px 16px;border-top:1px solid var(--line);font:400 12.5px/1.4 var(--mono);color:var(--label)}.siem-mx-detail b{font:600 16px/1.2 var(--display);letter-spacing:-.02em;color:var(--ink)}.siem-mx-why{flex-basis:100%;font:400 14px/1.5 var(--sans);color:var(--body)}.siem-links{grid-column:1/-1;display:flex;flex-wrap:wrap;gap:12px 28px;margin-top:clamp(16px,2vw,28px)}@media (max-width:1180px){.siem-cl{grid-template-columns:1fr}.siem-mx-grid{grid-template-columns:repeat(4,minmax(0,1fr))}.siem-mx-col:nth-child(5){border-left:0}}@media (max-width:980px){.siem-mx,.siem-q{grid-template-columns:1fr}.siem-mx-src-list{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (max-width:720px){.siem-tri-strip{grid-template-columns:repeat(3,minmax(0,1fr))}.siem-tri-strip li:nth-child(4){border-left:0}.siem-tri-strip li:nth-child(n+4){border-top:1px solid var(--line-dark)}.siem-tri-ev li{grid-template-columns:62px 1fr 1fr 56px;font-size:11px}.siem-cl-dl{grid-template-columns:1fr;gap:4px}.siem-cl-dl dd{margin-bottom:8px}.siem-cl-build li{grid-template-columns:22px minmax(0,1fr)}.siem-cl-build li span{grid-column:2}.siem-cl-cases li{grid-template-columns:22px auto minmax(0,1fr)}.siem-cl-cases .v{grid-column:1/-1;justify-self:start;text-align:left}.siem-cl-risk{grid-template-columns:repeat(5,minmax(0,1fr));gap:3px}.siem-cl-risk li{padding:7px 6px;font-size:9px}.siem-mx-grid{grid-template-columns:repeat(2,minmax(0,1fr))}.siem-mx-col:nth-child(5),.siem-mx-col:nth-child(odd){border-left:0}.siem-mx-src-list{grid-template-columns:1fr}}@media (prefers-reduced-motion:reduce){.siem-live i,.siem-q-row.is-new,.siem-tri-card{animation:none}.siem-cl-win{transition:none}}