> ## Documentation Index
> Fetch the complete documentation index at: https://hoopdev-docs-improve-idp-sso-pages.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# SIEM

> Forward session events to your SIEM or logging pipeline using runbook hooks.

Hoop can forward session events — opens, closes, reviews — to any external system, making it straightforward to feed audit data into a SIEM, alerting platform, or custom logging pipeline.

The recommended approach uses **runbook hooks**: lightweight scripts in your runbooks git repository that execute automatically when session events occur. No third-party webhook service is required.

<Card title="Webhooks / SIEM" icon="webhook" href="/setup/apis/webhooks-siem">
  Set up runbook hooks to forward session events to your SIEM
</Card>