Sim 6 — Data Normalization Pipeline
Watch raw log events transform through parsing, normalization, enrichment, and correlation stages.
Select Log Source
Windows Authentication Event (4625)
DNS Query Log
Process Execution (Sysmon/EDR)
AWS CloudTrail (S3 GetObject)
Run Pipeline
Pipeline Stages
Schema Comparison
Field
ECS (Elastic)
OCSF (AWS)
CIM (Splunk)