SIEM/SOAR or what?

We currently have an MDR solution for endpoints and servers, and we have a mail filtering service as well as on premise AD, and O365/Azure.

I am looking for something, or a set of tools that can pull data from all of those sources and correlate, and alert off of both custom workflows/playbooks and rules as well as referencing existing threat rules for IOCs. I would like to be able to make some automated workflows for the most critical issues …

alert azure cybersecurity data endpoints mail mdr o365 on premise playbooks premise rules servers service siem soar solution tools workflows