Patent ID: 11924250
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 7:
8. A method comprising:
receiving, as part of a training data set, a plurality of labeled documents and mitigation actions that were recommended or performed to resolve a security issue indicated in the plurality of labeled documents;
learning, for a model that implements natural language processing and using the training data set, (i) a mapping between one or more text segments and an individual notable security feature and (ii) a mapping between the individual notable security feature and a mitigation action;
receiving an unstructured document that includes text provided by multiple different security providers, wherein the text included in the unstructured document indicates the security issue via multiple different alerts generated by the multiple different security providers based on at least one detected event;
applying, by one or more processing units, the model to the text included in the unstructured document;
identifying, based on the application of the model, notable security features associated with the security issue;
mapping, based on the application of the model, the notable security features to a prescribed set of mitigation actions; and
providing the prescribed set of mitigation actions to at least one entity capable of resolving the security issue.