All of the data Wirespeed ingests from your Integrations are transformed to OCSF and stored in our SIEM. These events are used to enrich detections on related systems, in advanced queries, as well as custom detections.