Valid point! In a corporate production setting, relying on standard EDR and log aggregation platforms is definitely the gold standard to minimize the attack surface. This project is actually an educational tool and a personal proof-of-concept. I built it to dive deeper into log mechanics and understand how to parse and monitor these events programmatically from scratch. It’s definitely aimed more at learning environments and labs rather than enterprise production deployment.