Patent ID: 11936667
Assignee: DARKTRACE HOLDINGS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A cyber threat defense system, the cyber threat defense system comprising:
an analyzer module comprising a modeler to model network data as a sequence of events, and a predictor to predict a next item in the sequence of events and to identify one or more anomalies in the sequence of events;
a user interface configured to convey a notification of one or more anomalies occurring in a network protected by the cyber threat defense system; and
an autonomous response module configured to generate at least a notification in response to the analyzer module identifying the one or more anomalies;
wherein the predictor is configured to provide in the notification conveyed on the user interface (i) information about the one or more anomalies, and ii) additional contextual information, beyond a possible score, about the one or more anomalies in order to enhance a user's understanding regarding the identified one or more anomalies, where the predictor is configured to use a JA3 hash of the network data and a domain to match to particular user agents; and to provide in the notification information about the particular user agents.