Patent ID: 9336287
Filing Date: 2016-05-10
CPC Classification: G06F,H04L

Claim Text:
1. A method for gathering a plurality of data and representing the results in a computer environment, the method comprising: collecting the plurality of data, the plurality of data comprising network flow data, network alerts and system log data collectively comprising events, the events sharing a same derived key in an in-memory sliding window; superimposing, using a processor, the events sharing the same derived key in the in-memory sliding window into a single record to form superimposed events; superimposing, using the processor, associated attributes from the plurality of data into a cross relationship to form superimposed attributes, the cross relationship being a collection of unique attribute pairings; storing the superimposed events in a first computer readable data store; and storing the superimposed attributes in a second computer readable data store.