Patent ID: 11874872
Assignee: PALANTIR TECHNOLOGIES INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 16:
17. A computer program, stored on a non-transitory computer readable medium, which, when executed by one or more processors of a data processing apparatus causes the data processing apparatus to perform operations comprising:
receiving one or more event records;
generating, using the one or more event records, an event descriptor object descriptive of one or more potential suspicious system events indicative of a cybersecurity threat occurring in a networked system, wherein the event descriptor object comprises a plurality of event properties;
receiving one or more entity records;
generating, using the one or more entity records, an entity descriptor object descriptive of one or more entities relevant to a security of the networked system, wherein the entity descriptor object comprises a plurality of entity properties;
incorporating, into an object graph, the event descriptor object as a first node and the entity descriptor object as a second node;
in response to determining that a value of an entity property of the plurality of entity properties matches a value of an event property of the plurality of event properties, associating, in the object graph, the event descriptor object with the entity descriptor object; and
determining a course of action entity descriptor object descriptive of one or more actions for mitigating the cybersecurity threat, wherein the object graph comprises a link between the event descriptor object and the course of action entity descriptor object.