Follow along with Ramiro Ferrão as he introduces Stalking Notify, a Nagios Core extension that builds on stalking options to notify when check output changes—even when state stays the same. He compares it to volatile services, then demos a Security Information and Event Management (SIEM)-to-Nagios and Security Orchestration, Automation and Response (SOAR)-style workflow: JSON webhooks into Nagios XI components, automatic service creation from security incidents, activity logging, and ideas for tighter event-handler and firewall automation.