A SIEM implementation using Microsoft Sentinel to monitor failed RDP login attempts on a honeypot. Includes a PowerShell script for log enrichment with geolocation data and custom visualizations in Sentinel workbooks.