SIEM - Aggregate Data

SIEM - Aggregate Data ()

Aggregation is the process of moving data and log files from disparate sources into a common repository. Collected data is placed into a homogenous data store – typically purpose-built flat file repositories or relational databases – where analysis, reporting, and forensics occur; and archival policies are applied.



Security Operations Centre - Protective Monitoring - SIEM Processes - DRAFT
Security Operations Center Architecture (SoC) - DRAFT in progress



		SIEM - Aggregate Data	SIEM - Enrich Data
		SIEM - Normalise data	SIEM - Aggregate Data
		Security Monitoring - Gather	SIEM - Aggregate Data
		SIEM - Maintain Event Data	SIEM - Aggregate Data