Protect is the entry point to TOTAL, stopping attacks and generating native identity, device, and behavioral signals. Unlike aggregated logs, real-time protection creates immediate enterprise defense and stronger security.