10. Security Tools Ports

Security monitoring tools—like Splunk, Elastic, Defender, and CrowdStrike—use defined ports for log ingestion, agent communication, dashboards, and API calls. This dataset helps SOC teams, MDR/XDR providers, and SIEM architects design stable logging pipelines, validate agent health, and identify insecure management interfaces.