Last month your company got a new identity system. Nobody told the SOC. It is called Claude. Someone made themselves owner. Someone created an API key that never expires. Someone invited an outside domain. None of it reached your SIEM. Anthropic publishes the records (Admin API, Enterprise activity feed). CyRay now pulls both and runs detections on them. Every AI tool is an identity system wearing a chat window. Watch the door. https://cyray.io/integrations/claude #SecOps #DetectionEngineering