You will definitely need a continuous monitoring system for your SIEM operations. Stealthwatch, Vectra and Bricata are my favourites.  If you are looking for ISE-integration I can recommend Stealthwatch, it's also pretty much into behavior-monitoring while it gives a…