Câu 31: SPLK-5003: Splunk Certified Cybersecurity Defense Architect

A threat hunter is looking for suspicious login activity across multiple different authentication systems and cloud providers. Today, the threat hunter has to query multiple different data sources with unique logic to gather basic information about authentication events. What method provides a simple way to standardize data formats, and look for common activity across different sources?

1. A. Risk-based alerting
2. B. Adaptive Response Actions
3. C. Calculated fields
4. D. Data normalization — đáp án hiện tại