Alert sanitization techniques described in section 6 protect sensitive information contained in raw alerts, but still allow a wide variety of large-scale, cross-organization analyses to be performed on the sanitized data.
