by analyzing network traffic in real-time, detecting patterns that indicate potential threats, taking immediate action, hence enhancing the posture of the network