Patent ID: 11936667
Assignee: DARKTRACE HOLDINGS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A method of detecting a cyber threat, the method comprising:
using a modeler to model network data as a sequence of events;, using a predictor to predict a next item in the sequence of events and to identify one or more anomalies in the sequence of events;
using a user interface conveying a notification of the one or more anomalies occurring in a network protected by a cyber threat defense system;
using the predictor to match a JA3 hash of the network data and a domain to particular user agents; and to provide in a notification information about the particular user agents; and
generating at least the notification in response to the predictor identifying the one or more anomalies, the notification conveying on the user interface (i) information about the one or more anomalies, and ii) additional contextual information, beyond a possible score, about the one or more anomalies in order to enhance a user's understanding regarding the identified one or more anomalies.