Data Aggregation

Data aggregation is the process of gathering data from multiple sources and storing it in a central location. Before the data is stored, it may also be parsed or converted into a more useful format, which makes it easier to perform operations involving large amounts of data from dissimilar sources. In cybersecurity environments, data aggregation is typically an ongoing task, since data is continually generated by numerous sources in an SOC. Approaches to storing this data are also varied, ranging from relational databases to data lakes.