Patent ID: 11861001
Assignee: RELIAQUEST HOLDINGS, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 20:
21. A computing system including a processor and memory configured to perform operations comprising:
gathering objects from a plurality of sources associated with a computing platform in response to a security event; the plurality of sources includes one or more of log files maintained by a SIEM system and log files maintained by one or security-relevant sub systems;
obtaining object information concerning one or more initial objects within a computing platform in response to the security event;
identifying an event type for the security event;
executing a response script based, at least in part, upon the event type; and
providing suggestions concerning additional objects to be reviewed by a third party, wherein the additional objects include one or more of a time-based traffic map object, a destination port object, a service plunk object, a service CB Response object, an outbound traffic port graphical object, and a data sources graphical object.