Patent ID: 11874872
Assignee: PALANTIR TECHNOLOGIES INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 13:
14. A method, performed by one or more processors, comprising:
receiving, from a server device, a representation of an event descriptor object descriptive of one or more potential suspicious system events indicative of a cybersecurity threat occurring in a networked system, wherein the representation of the event descriptor object comprises a plurality of event properties;
displaying the plurality of event properties;
receiving an input indicative of a request for information associated with the event descriptor object;
sending, to the server device, the request for information associated with the event descriptor object; and
receiving, from the server device, a representation of an entity descriptor object descriptive of one or more entities relevant to a security of the networked system wherein:
the representation of the entity descriptor object comprises a plurality of entity properties;

in response to determining that a value of an entity property of the plurality of entity properties matches a value of an event property of the plurality of event properties, the entity descriptor object as a first node is associated with the event descriptor object as a second node in an object graph at the server device;
determining a course of action entity descriptor object descriptive of one or more actions for mitigating the cybersecurity threat, wherein the object graph comprises a link between the event descriptor object and the course of action entity descriptor object; and
displaying the plurality of entity properties.