correlation

Also written: correlates, correlate

Linking related alerts from different sources, such as email, sign-ins and endpoints, into one incident with one timeline. It is XDR's main job.

Where the book teaches it