Network Monitor

General-purpose visibility layer — bandwidth, connections, latency, protocols in use. The dashboard operations teams live in; not tuned for attacks specifically, but often catches them anyway.