Which step in the SIEM process transforms raw data to create consistent log records?1 分Normalize dataCollect and aggregate dataAnalyze dataCentralize data

To determine which step in the Security Information and Event Management (SIEM) process transforms raw data into consistent log records, let's analyze the options:

1. Normalize Data: This step involves converting data from various sources into a common format. It ensures that the information can be compared and analyzed more easily.

2. Collect and Aggregate Data: This step is focused on gathering log data from various sources and combining it, but it does not transform it into consistent records.

3. Analyze Data: This step involves examining the aggregated data to identify patterns and security incidents, which is done after the data has been normalized.

4. Centralize Data: This step refers to storing the collected data in a centralized location for easier access and analysis.

Conclusion

The correct answer is Normalize Data, as this is the step that specifically transforms raw data into consistent log records suitable for further analysis.