A great portion of a cyber security analyst’s job is to analyze data. However, data must be structured and normalized prior to analysis otherwise its meaning and context can be lost…and incidents of compromise might be overlooked. This course will introduce you to the concept of data normalization as it pertains to cyber security solutions. You’ll learn why data normalization is important, some methods by which it can be automated, and some of the manual tasks involved when automation is not possible. You’ll also learn about the 5-Tuple and how this concept is critical to being able to effectively analyze networking data. An introduction to DNS Intelligence will be presented showcasing its ability to facilitate data analysis. Lastly, you’ll be introduced to some common methods of data analysis by learning about retrospective analysis, deterministic analysis, and probabilistic analysis.
