normalization

The translation of events from a security-product-specific format to Information Manager format. Information Manager normalizes events so that it can recognize threats across product families.